--- On Sat, 11/9/10, bytehd wrote:
>
> Thankfully, nothing scrrewed up in my setup as its no diff
> from any one
> elses.
>
> I did not have to resort to the worlds worst AV with Sane
> Signatures, nor
> the bayes option.
>
> I just tweaked my other settings.
>
> Image spam is gone.
>
>
> -
On 2010-09-10 5:42 PM, bytehd wrote:
>
> Thankfully, nothing scrrewed up in my setup as its no diff from any one
> elses.
>
> I did not have to resort to the worlds worst AV with Sane Signatures, nor
> the bayes option.
>
> I just tweaked my other settings.
>
> Image spam is gone.
Care to sha
Thankfully, nothing scrrewed up in my setup as its no diff from any one
elses.
I did not have to resort to the worlds worst AV with Sane Signatures, nor
the bayes option.
I just tweaked my other settings.
Image spam is gone.
--
View this message in context:
http://old.nabble.com/Image-spam-
> Gotcha, I have done that.
Hmmm... then something went wrong :/
> Just wonder how many years it takes to get it "even"
It depends from your email volume; on a low volume
box it may take a month or so; just ensure that ASSP
sees all the traffic (inbound and outbound) and run
the rebuildspamdb
Gotcha, I have done that.
Just wonder how many years it takes to get it "even"
I did not prime it, the spamdb was blank at install back in 2007
GrayHat wrote:
>
>
>> well this ASSP has been in production for 1305 days
>>
>> Spam Weight:1,747,324
>> Not-Spam Weight: 4,836,427
>>
>> Co
> well this ASSP has been in production for 1305 days
>
> Spam Weight:1,747,324
> Not-Spam Weight: 4,836,427
>
> Corpus norm: 0.3613 (warning: ham heavy)
> Corpus correction settings - low:"0.5
> high:1.5 minimum files:1 minimum
> days:14"
It also depends from HOW you built your
well this ASSP has been in production for 1305 days
Spam Weight: 1,747,324
Not-Spam Weight: 4,836,427
Corpus norm:0.3613 (warning: ham heavy)
Corpus correction settings - low:"0.5 high:1.5 minimum files:1 minimum
days:14"
--
View this message in context:
http://old.nabble.c
> I have Bayes turned off
> it blocks too much
Hmm... you probably didn't train it correctly, see, training
the bayes filter is tricky and you just CAN'T pick a bunch
of spam/nospam emails from someone else and use it
to build your corpus since in most cases your email traffic
patterns will be d
I have Bayes turned off
it blocks too much
and client says if we use the bayes from ASSP, we might as well get a
Barracuda
(Thats all Barracuda does, it seems)
assplove wrote:
>
> Put scoring values for 'earn ... degree' and/or 'degree' in one of
> your subject re's.
>
> I'd turn off pbwh
Put scoring values for 'earn ... degree' and/or 'degree' in one of your
subject re's.
I'd turn off pbwhite bonus scoring.. that's rewarding someone for something
they are supposed to do in the first place. it's always resulted in missed
spam for me.
Also didn't see ANY negative scores..
Still looking for a regex.
instead of another product.
but thanks
--
View this message in context:
http://old.nabble.com/Image-spam-tp29499592p29505953.html
Sent from the assp-user mailing list archive at Nabble.com.
--
bytehd wrote:
> Do i need a special regex for this?
>
> I have spam that makes it through all the ASSP blocking methods.
> Diff IP address, subject is clean, usually 5-10 words.
> No body whatsoever.
>
Use clamav along with the SaneSecurity signatures, gets almost all of them.
http://www.sane
Do i need a special regex for this?
I have spam that makes it through all the ASSP blocking methods.
Diff IP address, subject is clean, usually 5-10 words.
No body whatsoever.
Customer is cursing ASSP because he gets several hundred per day.
Any suggestions.
I can forward examples
Here is
> Sorry I forgot the rest, here they are
here are the sigs I'm currently using
rsync://rsync.sanesecurity.net/sanesecurity/sanesecurity.ftm
rsync://rsync.sanesecurity.net/sanesecurity/sigwhitelist.ign2
rsync://rsync.sanesecurity.net/sanesecurity/junk.ndb
rsync://rsync.sanesecurity.net/sanesecuri
.25
Dale
- Original Message -
From: "Grayhat"
To: "Dale" ; "For Users of ASSP"
Sent: Thursday, July 22, 2010 12:22 PM
Subject: Re: [Assp-user] Image Spam
>
>> We are getting a lot of image spam through lately.
>>
>> Does any
Sanesecurity\.Jurlbl\.Auto\.x=>1.6
Sanesecurity\.Jurlbl\.x=>2.6
Thanks
Dale
- Original Message -
From: "Grayhat"
To: "Dale" ; "For Users of ASSP"
Sent: Thursday, July 22, 2010 12:22 PM
Subject: Re: [Assp-user] Image Spam
>
>> We a
> We are getting a lot of image spam through lately.
>
> Does anyone else have this issue?
>
> How did you solve it?
http://www.sanesecurity.com/databases.htm
--
This SF.net email is sponsored by Sprint
What will you
Hi
We are getting a lot of image spam through lately.
Does anyone else have this issue?
How did you solve it?
Thanks
Dale
--
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phon
I'm running ASSP 1.2.6 on Perl 5.008008. I've seen a big jump in image
spam over the last week or 2 and more has slipped thru that I would
like. I've added the RE:
s*=(?:3D)?\s*"?cid:
To my BombRE. But it's not matching anything. I'm trying to match:
src=3D"cid: or
src="cid:
Any ideas wh
My assp filters out any Picture Only Spam (These with the sprinkles in
the pictures...)
Maybe you have to feed assp with more from them :)
Matti
> If only this worked with ASSP!
> http://fuzzyocr.own-hero.net/wiki/WhatisFuzzyOcr
> Don't know how well it works.
> James.
>
If only this worked with ASSP!
http://fuzzyocr.own-hero.net/wiki/WhatisFuzzyOcr
Don't know how well it works.
James.
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get
21 matches
Mail list logo
