Re: [Mimedefang] Sendmail Help

2005-05-15 Thread John
NEVER run Sendmail as root. You should _typically_ have a user adn group named mail. Their UID:GID should go there. i.e. O DefaultUser=8:12 You should be dealing with these questions in the Sendmail news groups. You have a permission issue... At 11:18 PM 5/14/2005, you wrote: Ray

[Mimedefang] German spam (related to new worm Sober.q)

2005-05-15 Thread Stephane Lentz
For those who don't follow the SpamAssassin list there are some new spam messages in German (racist ones apparently) Some extra rules are available on : http://mailscanner.prolocation.net/german.cf News coverage : http://isc.sans.org/ http://www.viruslist.com/en/weblog N°6

Re: [Mimedefang] German spam (related to new worm Sober.q)

2005-05-15 Thread Ben Kamen
Stephane Lentz wrote: For those who don't follow the SpamAssassin list there are some new spam messages in German (racist ones apparently) Some extra rules are available on : http://mailscanner.prolocation.net/german.cf News coverage : http://isc.sans.org/ http://www.viruslist.com/en/weblog Ya,

Re: [Mimedefang] German spam (related to new worm Sober.q)

2005-05-15 Thread Joseph Brennan
It sends a bad HELO string, and the address shown in the To: header line is not only bogus but it is not one of the recipients. Other than this, it's pretty good. It does not contain a virus, it's not html and it has reasonable looking message and mime headers. I wish I had time to implement

Re: [Mimedefang] German spam (related to new worm Sober.q)

2005-05-15 Thread Martin Blapp
Hi, For those who don't follow the SpamAssassin list there are some new spam messages in German (racist ones apparently) Some extra rules are available on : http://mailscanner.prolocation.net/german.cf And here the rules for SA3: http://antispam.imp.ch/rules/sober_p.cf Martin

Re: [Mimedefang] German spam (related to new worm Sober.q)

2005-05-15 Thread Jan Pieter Cornet
On Sun, May 15, 2005 at 06:00:33PM -0400, Joseph Brennan wrote: I wish I had time to implement greylisting right now. What are you folks using on large systems? Can you point me to a web page? We operate a largish system, handling around 5 to 10 million emails/day, for around a million unique