Re: wrong date blocking ? was: Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-11 Thread Matthew Hannigan
On Fri, Jan 12, 2007 at 12:17:56AM +1100, Voytek Eymont wrote: > > what do you for date checks ? > > I have something like this, but, it requires altering every 365 days... > > header_checks > ... > /^Date:.*[a-z][a-z][a-z] 200[0-4]/ REJECT Your email has a .. > /^Date:.*[a-z][a-z][

Re: wrong date blocking ? was: Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-11 Thread Jeff Waugh
> what do you for date checks ? I don't. - Jeff -- Open CeBIT 2007: Sydney, Australia http://www.opencebit.com.au/ make: *** No rule to make target `whoopee'. Stop. -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs:

wrong date blocking ? was: Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-11 Thread Voytek Eymont
On Thu, January 11, 2007 4:22 pm, Jeff Waugh wrote: > Postfix for the win. > In /etc/postfix/mime_header_checks.regexp: Jeff, what do you for date checks ? I have something like this, but, it requires altering every 365 days... header_checks ... /^Date:.*[a-z][a-z][a-z] 200[0-4]/

Re: [SLUG] Spam again

2007-01-10 Thread David Lloyd
Sonia, http://www.akadia.com/services/postfix_uce.html Scroll to the "Header and Body Checks" section, although the whole thing is worth a read. DSL -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-10 Thread Michael Fox
On 1/11/07, Howard Lowndes <[EMAIL PROTECTED]> wrote: Ahh is that what it is, but can't they also be .rma And that would as a guess be realmedia audio files (aka no video). But that's a guess of course. I guess someone could block those too. Thanks -- SLUG - Sydney Linux User's Group Mailing

Re: Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-10 Thread Jeff Waugh
> Just a quick query on the above line. Shouldn't |do| read |do[ct]| > and |xl} read |xl[st]} No. I'm happy to get that stuff because more often than not it's something I actually want to receive... *or* the bad ones are painfully obvious before even opening them... *or* I don't use any

Re: Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-10 Thread Michael Fox
On 1/11/07, Howard Lowndes <[EMAIL PROTECTED]> wrote: Michael Fox wrote: > On 1/11/07, Howard Lowndes <[EMAIL PROTECTED]> wrote: >> > >> /filename=\"?(.*)\.(bat|chm|cmd|com|do|exe|hta|jse|rm|scr|pif|vbe|vbs|vxd|xl)\"?$/ >> REJECT For security reasons we reject attachments of this type >> >> Ju

Re: Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-10 Thread Michael Fox
On 1/11/07, Howard Lowndes <[EMAIL PROTECTED]> wrote: > /filename=\"?(.*)\.(bat|chm|cmd|com|do|exe|hta|jse|rm|scr|pif|vbe|vbs|vxd|xl)\"?$/ REJECT For security reasons we reject attachments of this type Just a quick query on the above line. Shouldn't |do| read |do[ct]| and |xl} read |xl

Re: Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-10 Thread Sonia Hamilton
* On Thu, Jan 11, 2007 at 04:22:32PM +1100, Jeff Waugh wrote: > > > I see you run Exim - any postfix users got ideas on how to do this in > > Postfix (ie block the mentioned type of attachments). > > Postfix for the win. Thanks heaps! -- Sonia Hamilton. GPG key A8B77238. -- SLUG - Sydney Linux

Blocking wang attachments with postfix [Was: [SLUG] Spam again]

2007-01-10 Thread Jeff Waugh
> * On Wed, Jan 10, 2007 at 02:02:12PM +1100, Dean Hamstead wrote: > > I recently blocked .jpg and .gif attachments on our server here at > > bong.com.au (which also serves fragfest.com.au) > > > > We also block .exe .com .scr .doc .xls .ppt > > I see you run Exim - any postfix users got ideas

Re: [SLUG] Spam again

2007-01-10 Thread Sonia Hamilton
* On Wed, Jan 10, 2007 at 02:02:12PM +1100, Dean Hamstead wrote: > I recently blocked .jpg and .gif attachments on our server > here at bong.com.au (which also serves fragfest.com.au) > > > We also block .exe .com .scr .doc .xls .ppt I see you run Exim - any postfix users got ideas on how to do

Re: [SLUG] Spam again

2007-01-09 Thread Dean Hamstead
I recently blocked .jpg and .gif attachments on our server here at bong.com.au (which also serves fragfest.com.au) fortunately we dont have many users so its not a huge drama. But its great that so much spam is image spam, because adding such a rule has dropped our spam *enormously* I also have

Re: [SLUG] Spam again

2007-01-09 Thread jam
On Wednesday 10 January 2007 08:55, [EMAIL PROTECTED] wrote: > > I've just noticed that the spam level hitting my mail server > > has increased 4 to 4 fold overnight, most of it being dropped > > at the CONNECT stage. > > http://www.lannet.com.au/traffic/h48/index.html > > > > Has anyone else notic

Re: [SLUG] Spam again

2007-01-09 Thread Adam Kennedy
Robert Thorsby wrote: On 2007.01.10 06:19 Howard Lowndes wrote: I've just noticed that the spam level hitting my mail server has increased 4 to 4 fold overnight, most of it being dropped at the CONNECT stage. http://www.lannet.com.au/traffic/h48/index.html Has anyone else noticed similar? Yes

Re: [SLUG] Spam again

2007-01-09 Thread Ben Donohue
yes as well. I have IPCop with Copfilter and I'm not sure that it's doing too much to stop it as it still ends up in the inbox. I'm having to train thunderbird to treat it as spam. Any copfilter users here who are *not* getting any spam? Ben Howard Lowndes wrote: I've just noticed that the spa

Re: [SLUG] Spam again

2007-01-09 Thread Robert Thorsby
On 2007.01.10 06:19 Howard Lowndes wrote: I've just noticed that the spam level hitting my mail server has increased 4 to 4 fold overnight, most of it being dropped at the CONNECT stage. http://www.lannet.com.au/traffic/h48/index.html Has anyone else noticed similar? Yes, there has been a mass