German Spam local.conf

2005-05-18 Thread Patrick Steiner 
hello,
i am totally unskilled in config spamassisn, but i found this url:
http://www.exit0.us/index.php?pagename=GermanSoberSpamBounceRules
i but the text into my /etc/mail/spamassassin/local.conf
and restarted spamassassin. but spamc doesnt use the rules :-(.
if have tryed:spamc < 1116480451.P29200Q0M105826.isengard.skynet\:2\,Sc
Return-path: <[EMAIL PROTECTED]>
Received: from mmp.a1.net [194.48.124.160]
   by localhost with POP3 (fetchmail-6.2.5)
   for [EMAIL PROTECTED] (single-drop); Wed, 18 May 2005 09:50:05 
+0200 (CEST)
Received: from uxmtat02-real.net.mobilkom.at
(uxmtat02-real.net.mobilkom.at [194.48.125.55]) by 
msgstore4.net.mobilkom.at
(A1.net ORGANIZER - Alle Emails und Termine fest im Griff)
with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED];
Wed, 18 May 2005 09:48:30 +0200 (MEST)
Received: from okioweoj.com (N712P016.adsl.highway.telekom.at 
[62.47.32.240])
by smtpin2.a1.net (A1.net ORGANIZER - Alle Emails und Termine fest im 
Griff)
with SMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]
(ORCPT [EMAIL PROTECTED]); Wed, 18 May 2005 09:48:30 +0200 (MEST)
Date: Wed, 18 May 2005 07:44:32 + (GMT)
From: [EMAIL PROTECTED]
Subject: Auslaenderpolitik
To: [EMAIL PROTECTED]
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7bit
Importance: Normal
X-Priority: 3 (Normal)
Original-recipient: rfc822;[EMAIL PROTECTED]
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.2 with clamscan / ClamAV 
0.85/884/Wed May 18 00:14:26 2005
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on isengard.skynet
X-Spam-Level: 
X-Spam-Status: No, score=4.5 required=5.0 tests=AWL,BAYES_80,
   DNS_FROM_RFC_POST,NO_REAL_NAME,PRIORITY_NO_NAME,RCVD_IN_SORBS_WEB
   autolearn=no version=3.0.3

Lese selbst:
http://www.mjoelnirsseite.de/2100.htm
here is my local.conf:
# These values can be overridden by editing ~/.spamassassin/user_prefs.cf
# (see spamassassin(1) for details)
# These should be safe assumptions and allow for simple visual sifting
# without risking lost emails.
required_hits 5
report_safe 0
rewrite_header Subject [SPAM]
#ruleset to catch german sober virus spam bounces
#adapted from Raymond Dijkxhoor's original ruleset by Kevin Peuhkurinen
#http://www.exit0.us/index.php?pagename=GermanSoberSpamBounceRules
body __PROLO_GSPAMB01 /Gegen das Vergessen/i
body __PROLO_GSPAMB02 /Verbrechen der deutschen Frau/i
body __PROLO_GSPAMB03 /Dresden Bombing Is To Be Regretted Enormously/i
body __PROLO_GSPAMB04 /Graeberschaendung auf bundesdeutsche Anordnung/i
body __PROLO_GSPAMB05 /Deutsche Buerger trauen sich nicht \.\.\./i
body __PROLO_GSPAMB06 /S\.O\.S. Kiez\! Polizei schlaegt Alarm/i
body __PROLO_GSPAMB07 /Schily ueber Deutschland/i
body __PROLO_GSPAMB08 /Massenhafter Steuerbetrug durch auslaendische 
Arbeitnehmer/i
body __PROLO_GSPAMB09 /The Whore Lived Like a German/i
body __PROLO_GSPAMB10 /Transparenz ist das Mindeste/i
body __PROLO_GSPAMB11 /Volk wird nur zum zahlen gebraucht!/i
body __PROLO_GSPAMB12 /Trotz Stellenabbau/i
body __PROLO_GSPAMB13 /Augen auf/i
body __PROLO_GSPAMB14 /Armenian Genocide Plagues Ankara 90 Years On/i
body __PROLO_GSPAMB15 /Du wirst ausspioniert \.\.\.\.\!/i
body __PROLO_GSPAMB16 /Dresden 1945/i
body __PROLO_GSPAMB17 /Blutige Selbstjustiz/i
body __PROLO_GSPAMB18 /Turkish Tabloid Enrages Germany with Nazi 
Comparisons/i
body __PROLO_GSPAMB19 /Multi-Kulturell \= Multi-Kriminell/i
body __PROLO_GSPAMB20 /60 Jahre Befreiung: Wer feiert mit?/i
body __PROLO_GSPAMB21 /Vorbildliche Aktion/i
body __PROLO_GSPAMB22 /Auf Streife durch den Berliner Wedding/i
body __PROLO_GSPAMB23 /Tuerkei in die EU/i
body __PROLO_GSPAMB24 /Paranoider Deutschenmoerder kommt in Psychiatrie/i
body __PROLO_GSPAMB25 /Hier sind wir Lehrer die einzigen Auslaender/i
body __PROLO_GSPAMB26 /4\,8 Mill\. Osteuropaeer durch Fischer-Volmer 
Erlass/i
body __PROLO_GSPAMB27 /Du wirst zum Sklaven gemacht\!\!\!/i
body __PROLO_GSPAMB28 /Deutsche werden kuenftig beim Arzt abgezockt/i
body __PROLO_GSPAMB29 /Auslaenderpolitik/i
body __PROLO_GSPAMB30 /Auslaender bevorzugt/i
body __PROLO_GSPAMB31 /Can you believe this still happens today/i

header __KP_DAEMON From =~ 
/(?:postmaster|daemon|administrator|automated|subsystem)/i
header __KP_UNDELIVSubject =~ 
/(?:undeliverable|returned|failed|failure)/i

metaKP_GSPAMB01 __PROLO_GSPAMB01 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB02 __PROLO_GSPAMB02 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB03 __PROLO_GSPAMB03 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB04 __PROLO_GSPAMB04 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB05 __PROLO_GSPAMB05 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB06 __PROLO_GSPAMB06 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB07 __PROLO_GSPAMB07 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB08 __PROLO_GSPAMB08 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB09 __PROLO_GSPAMB09

Re: German Spam local.conf

2005-05-18 Thread Alan Premselaar 
Patrick Steiner wrote:
hello,
i am totally unskilled in config spamassisn, but i found this url:
http://www.exit0.us/index.php?pagename=GermanSoberSpamBounceRules
i but the text into my /etc/mail/spamassassin/local.conf
and restarted spamassassin. but spamc doesnt use the rules :-(.
if have tryed:spamc < 1116480451.P29200Q0M105826.isengard.skynet\:2\,Sc
Return-path: <[EMAIL PROTECTED]>
Received: from mmp.a1.net [194.48.124.160]
   by localhost with POP3 (fetchmail-6.2.5)
   for [EMAIL PROTECTED] (single-drop); Wed, 18 May 2005 09:50:05 
+0200 (CEST)
Received: from uxmtat02-real.net.mobilkom.at
(uxmtat02-real.net.mobilkom.at [194.48.125.55]) by 
msgstore4.net.mobilkom.at
(A1.net ORGANIZER - Alle Emails und Termine fest im Griff)
with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED];
Wed, 18 May 2005 09:48:30 +0200 (MEST)
Received: from okioweoj.com (N712P016.adsl.highway.telekom.at 
[62.47.32.240])
by smtpin2.a1.net (A1.net ORGANIZER - Alle Emails und Termine fest im 
Griff)
with SMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]
(ORCPT [EMAIL PROTECTED]); Wed, 18 May 2005 09:48:30 +0200 (MEST)
Date: Wed, 18 May 2005 07:44:32 + (GMT)
From: [EMAIL PROTECTED]
Subject: Auslaenderpolitik
To: [EMAIL PROTECTED]
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7bit
Importance: Normal
X-Priority: 3 (Normal)
Original-recipient: rfc822;[EMAIL PROTECTED]
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.2 with clamscan / ClamAV 
0.85/884/Wed May 18 00:14:26 2005
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on isengard.skynet
X-Spam-Level: 
X-Spam-Status: No, score=4.5 required=5.0 tests=AWL,BAYES_80,
   DNS_FROM_RFC_POST,NO_REAL_NAME,PRIORITY_NO_NAME,RCVD_IN_SORBS_WEB
   autolearn=no version=3.0.3

Lese selbst:
http://www.mjoelnirsseite.de/2100.htm
here is my local.conf:
# These values can be overridden by editing ~/.spamassassin/user_prefs.cf
# (see spamassassin(1) for details)
# These should be safe assumptions and allow for simple visual sifting
# without risking lost emails.
required_hits 5
report_safe 0
rewrite_header Subject [SPAM]
#ruleset to catch german sober virus spam bounces
#adapted from Raymond Dijkxhoor's original ruleset by Kevin Peuhkurinen
#http://www.exit0.us/index.php?pagename=GermanSoberSpamBounceRules
body __PROLO_GSPAMB01 /Gegen das Vergessen/i
body __PROLO_GSPAMB02 /Verbrechen der deutschen Frau/i
body __PROLO_GSPAMB03 /Dresden Bombing Is To Be Regretted Enormously/i
body __PROLO_GSPAMB04 /Graeberschaendung auf bundesdeutsche Anordnung/i
body __PROLO_GSPAMB05 /Deutsche Buerger trauen sich nicht \.\.\./i
body __PROLO_GSPAMB06 /S\.O\.S. Kiez\! Polizei schlaegt Alarm/i
body __PROLO_GSPAMB07 /Schily ueber Deutschland/i
body __PROLO_GSPAMB08 /Massenhafter Steuerbetrug durch auslaendische 
Arbeitnehmer/i
body __PROLO_GSPAMB09 /The Whore Lived Like a German/i
body __PROLO_GSPAMB10 /Transparenz ist das Mindeste/i
body __PROLO_GSPAMB11 /Volk wird nur zum zahlen gebraucht!/i
body __PROLO_GSPAMB12 /Trotz Stellenabbau/i
body __PROLO_GSPAMB13 /Augen auf/i
body __PROLO_GSPAMB14 /Armenian Genocide Plagues Ankara 90 Years On/i
body __PROLO_GSPAMB15 /Du wirst ausspioniert \.\.\.\.\!/i
body __PROLO_GSPAMB16 /Dresden 1945/i
body __PROLO_GSPAMB17 /Blutige Selbstjustiz/i
body __PROLO_GSPAMB18 /Turkish Tabloid Enrages Germany with Nazi 
Comparisons/i
body __PROLO_GSPAMB19 /Multi-Kulturell \= Multi-Kriminell/i
body __PROLO_GSPAMB20 /60 Jahre Befreiung: Wer feiert mit?/i
body __PROLO_GSPAMB21 /Vorbildliche Aktion/i
body __PROLO_GSPAMB22 /Auf Streife durch den Berliner Wedding/i
body __PROLO_GSPAMB23 /Tuerkei in die EU/i
body __PROLO_GSPAMB24 /Paranoider Deutschenmoerder kommt in Psychiatrie/i
body __PROLO_GSPAMB25 /Hier sind wir Lehrer die einzigen Auslaender/i
body __PROLO_GSPAMB26 /4\,8 Mill\. Osteuropaeer durch Fischer-Volmer 
Erlass/i
body __PROLO_GSPAMB27 /Du wirst zum Sklaven gemacht\!\!\!/i
body __PROLO_GSPAMB28 /Deutsche werden kuenftig beim Arzt abgezockt/i
body __PROLO_GSPAMB29 /Auslaenderpolitik/i
body __PROLO_GSPAMB30 /Auslaender bevorzugt/i
body __PROLO_GSPAMB31 /Can you believe this still happens today/i

header __KP_DAEMON From =~ 
/(?:postmaster|daemon|administrator|automated|subsystem)/i
header __KP_UNDELIVSubject =~ 
/(?:undeliverable|returned|failed|failure)/i

metaKP_GSPAMB01 __PROLO_GSPAMB01 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB02 __PROLO_GSPAMB02 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB03 __PROLO_GSPAMB03 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB04 __PROLO_GSPAMB04 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB05 __PROLO_GSPAMB05 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB06 __PROLO_GSPAMB06 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB07 __PROLO_GSPAMB07 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB08 __PROLO_GSPAMB08 && (__KP_DAEMON || __KP_UNDELIV)
metaKP_GSPAMB0

Re: German Spam local.conf

2005-05-19 Thread wolfgang 
In an older episode (Thursday 19 May 2005 08:20), Patrick Steiner wrote:
> hello,
> 
> i am totally unskilled in config spamassisn, but i found this url:
> 
> http://www.exit0.us/index.php?pagename=GermanSoberSpamBounceRules

That file will only detect Non Delivery Notifications that have been sent in 
reply to the sober spam. You are running it on one of the spams, not on a non 
delivery notification.

> i but the text into my /etc/mail/spamassassin/local.conf

As pointed out here before, that is to be local.cf, or any .cf file, not 
local.conf tho.

> From: [EMAIL PROTECTED]

does not match
header __KP_DAEMON From =~ /(?:postmaster|daemon|administrator|
automated|subsystem)/i

> Subject: Auslaenderpolitik

does not match
header __KP_UNDELIVSubject =~ /(?:undeliverable|returned|failed|
failure)/i

rules to detect the original sober spam can be found at

http://mailscanner.prolocation.net/german.cf

http://weir.dattitu.de/archives/9-Filtering-Sober-P.html

regards,

wolfgang

Re: German Spam local.conf

2005-05-19 Thread Kris Deugau 
Alan Premselaar wrote:
>   first, make sure your file is named local.cf and not local.conf.
> also, you don't appear to have any scores assigned to these rules.
> I'm not a rules writing expert, but these rules may not actually do
> anything for you without scores assigned.

ALL rules receive a default score of 1 - with the exception that rules
with names that begin with __ do not add to the total score for the
message.

-kgd
-- 
Get your mouse off of there!  You don't know where that email has been!

RE: German Spam local.conf

2005-05-19 Thread Sheree . Peterson 
I would like to be removed from this distrubtion list, anyone have an idea
how to do that?

-Original Message-
From: Kris Deugau [mailto:[EMAIL PROTECTED]
Sent: Thursday, May 19, 2005 6:16 AM
To: users@spamassassin.apache.org
Subject: Re: German Spam local.conf


Alan Premselaar wrote:
>   first, make sure your file is named local.cf and not local.conf.
> also, you don't appear to have any scores assigned to these rules.
> I'm not a rules writing expert, but these rules may not actually do
> anything for you without scores assigned.

ALL rules receive a default score of 1 - with the exception that rules
with names that begin with __ do not add to the total score for the
message.

-kgd
-- 
Get your mouse off of there!  You don't know where that email has been!
___
The information contained in this message and any attachment may be
proprietary, confidential, and privileged or subject to the work
product doctrine and thus protected from disclosure.  If the reader
of this message is not the intended recipient, or an employee or
agent responsible for delivering this message to the intended
recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited.
If you have received this communication in error, please notify me
immediately by replying to this message and deleting it and all
copies and backups thereof.  Thank you.

Re: German Spam local.conf

2005-05-19 Thread Matt Kettler 
[EMAIL PROTECTED] wrote:
> I would like to be removed from this distrubtion list, anyone have an idea
> how to do that?

Read the message headers for *ANY* post on the list:


list-unsubscribe: 


Note: if your mail reader won't show you these headers, it's broken.

This header is the RFC required method for mailing lists to advertise how to
unsubscribe. Most lists which are of a technical nature conform to this, so keep
an eye out for it in the future.

Re: German Spam local.conf

2005-05-20 Thread James R 
[EMAIL PROTECTED] wrote:
I would like to be removed from this distrubtion list, anyone have an idea
how to do that?
Yes in the headers:
[EMAIL PROTECTED]
--
Thanks,
James