I noticed this as well, after having long, long lookup times for the past
couple of days, it started claiming just about every IP that connected to us
was on the list. It really seems to have gone belly up or someone just set
it to respond as Yes for every query Oh well, not in use here
On Tue, 26 Aug 2003, Dave Stern - Former Rocket Scientist wrote:
:0:
* !^X-Spam-Status:.*USER_IN_WHITELIST
$MAILDIR/rejects
X-Spam-Status: No, hits=-93.4 required=5.0
tests=BASE64_ENC_TEXT,BAYES_60,HTML_40_50,MIME_HTML_ONLY,
Jens Teubner writes:
Hi,
although I'm definitely not a SpamAssassin expert, I observed a pattern
that was present in roughly half the spam mails I got during the last
weeks.
--- snip ---
Received: from 134.34.240.60 (unknown [202.99.169.213])
by guanin.uni-konstanz.de (Postfix)
On Tue, 26 Aug 2003, Bart Schaefer wrote:
On Tue, 26 Aug 2003, Dave Stern - Former Rocket Scientist wrote:
:0:
* !^X-Spam-Status:.*USER_IN_WHITELIST
$MAILDIR/rejects
X-Spam-Status: No, hits=-93.4 required=5.0
tests=BASE64_ENC_TEXT,BAYES_60,HTML_40_50,MIME_HTML_ONLY,
On Tue, Aug 26, 2003 at 12:31:02AM -0700, Bob Dickinson (BSL) wrote:
We've been running the GA on the most recent mass check results and it's
been going for about 24 hours. How long does thing thing typically take?
Welcome to the GA. Sometimes it takes only a few hours, sometimes it
takes
Thus spake Larry Rosenman ([EMAIL PROTECTED]):
based on the below post from the Exim list, and other posts, and a bounce
that I received listing my humble (anti-relayed) server, I'd suggest the
following for folks:
score RCVD_IN_OSIRU 0
score RCVD_IN_OSIRU_RELAY 0
score
Hi,
James Miller wrote:
With all the trouble OSIRUSOFT is having, is it time to stop using them?
As of 12:40 this afternoon our mail server stopped accepting mail from our
main web server because it was listed on osirusoft. How I don't know since
it doesn't run an SMTP server -- it's protected
Larry Rosenman writes:
FYI, since SA uses the Osirusoft RBL.
confirmed -- relays.osirusoft.com has been switched to return
a match for every query. FPs galore.It's also suffering
a DDOS, so this may take a while to get through though.
Good reason to get 2.60rc3 out ASAP ;)
--j.
Did I write that junk below? Header/body, what is the difference? Well, I
guess I need to fade into a dark hole before the red flush fades from my
face. The real dilema now is to go to sleep or wake up. Hmmm, tough
choice.
Seriously though, I was wrong. Procmail does convert the folding
Just more confirmation.
Please set your Osirusoft scores to zero until 2.60rc3 or later comes out.
(the list I posted earlier are all the tests from 2.60rc2, fwiw).
LER
Forwarded Message
Date: Tuesday, August 26, 2003 15:58:22 -0700
From: michael [EMAIL PROTECTED]
To:
Update OSIRUSOFT issue:
I decided to go ahead and call Joe Jared since now our primary mail server
is now listed as well and I can't get mail to him.
- The following addresses had permanent fatal errors -
[EMAIL PROTECTED]
(reason: 553 5.3.0 [EMAIL PROTECTED]...
On Tue, 2003-08-26 at 22:33, James Miller wrote:
With all the trouble OSIRUSOFT is having, is it time to stop using them?
[...]
And to add to it, they are (have been since Friday) under a DDoS attack,
their web site is down, mail is not flowing to them (because of the attack I
assume)
It's
On Tue, 2003-08-26 at 23:32, Yackley, Matt wrote:
I noticed this as well, after having long, long lookup times for the past
couple of days, it started claiming just about every IP that connected to us
was on the list. It really seems to have gone belly up or someone just set
it to respond as
I was just thinking about the GA process and although I havn't looked at
it to see exactly how it works, I was wondering the following
Presumably it starts with a certain scoreset, runs the spam through, sees
what percentage score above 5, then runs the ham through and sees what
percentage
Hi,
Anyone who would like to is welcome to use rbl.axess.com as well, it's
our manual list of IP's that have sent spam directly to my personal account.
Please read rbllist.axess.com before using if you are in BT space, .br,
.cl, .mx or .kr space though because your dynamic IP's are probably
I include a perl script below that can be used on any non-SPAM email
message to extract the scores.
It *might* work for you :)
YMMV
Anthony
##
#!/usr/bin/perl
my @snet = ;
my @slocal = ;
$filename = /usr/share/spamassassin/50_scores.cf ;
Okay, regardless of whether it's SA's job to scan for different types of
attachments (like the Sobig virus), I wanted to try to see if I could work
out rules that would at least allow it to do so. I've tried the following,
just trying to test by scanning for JPEG and GIF:
body IMAGE_ATTACHMENT
based on the below post from the Exim list, and other posts, and a bounce
that I received
listing my humble (anti-relayed) server, I'd suggest the following for
folks:
score RCVD_IN_OSIRU 0
score RCVD_IN_OSIRU_RELAY 0
score RCVD_IN_OSIRU_DIALUP 0
score RCVD_IN_OSIRU_SPAM_SRC 0
score
The biggest problem with a score based system with an abrupt cutoff is the
uncertainty around the threshold. If the GA currently thinks its ok for a
ham to score 4.9 and still be called ham, and a spam to score 5.1 and
still be called spam, its not going to make as much effort to get a
cleaner
based on the below post from the Exim list, and other posts, and a bounce
that I received
listing my humble (anti-relayed) server, I'd suggest the following for
folks:
score RCVD_IN_OSIRU 0
score RCVD_IN_OSIRU_RELAY 0
score RCVD_IN_OSIRU_DIALUP 0
score RCVD_IN_OSIRU_SPAM_SRC 0
score
On Tue, Aug 26, 2003 at 07:42:53PM +0200, Arpi wrote:
I've transferred our rather big common bayes db collected (and trained)
on a linux mail gateway server over months, to a freebsd 4.7 system,
with spamassassin 2.55 (the linux server ran 2.53).
The first problem may be endianness. 2.5x is
Is there a way to disbale all checks, so I can then turn on just the few
that I want? I want to see how SA does with *just* Bayes filtering?
Also, is there a way to turn off all network checks?
# Enable or disable network checks
skip_rbl_checks 1
use_razor2 1
use_dcc
On Tue, Aug 26, 2003 at 11:41:02AM -0700, Rob Livermore wrote:
I'm attempting to install Spam-Assassin 2.60 and when I run $perl
Makefile.PL it reports back HTML::Parser 3 not found.
Install HTML::Parser. It's even in the docs. :)
--
Randomly Generated Tagline:
Politics is supposed to be
On Tue, Aug 26, 2003 at 04:46:41PM -0700, Ron Gilbert wrote:
Is there a way to disbale all checks, so I can then turn on just the few
that I want? I want to see how SA does with *just* Bayes filtering?
Not as a config option. Move all the /usr/share/spamassassin/*.cf (or wherever you
Larry Rosenman writes:
FYI, since SA uses the Osirusoft RBL.
confirmed -- relays.osirusoft.com has been switched to return
a match for every query. FPs galore.It's also suffering
a DDOS, so this may take a while to get through though.
Good reason to get 2.60rc3 out ASAP ;)
So are the
On Tue, Aug 26, 2003 at 02:03:59PM +0200, 'Carlo Wood' wrote:
I'll carefully make a new list that I will post later.
Ok, I now did it correctly - using an awk program.
Number of hams: 4548
Number of hams without '^(X-[Mm]ailer|User-Agent):': 1833
Number of Messsage ids with a domain: 4262
List
On Tue, 2003-08-26 at 13:44, Larry Gilson wrote:
Dave,
Thanks for your input. I have a better understanding now and agree with
you. I was headed down the wrong road.
It would be nice to have an @foo.localdomain format. That could be faked
too just like every other header field. It
On Tue, 2003-08-26 at 21:02, Fred I-IS.COM wrote:
Hello,
I found a new set of listwashing tokens, all are located inside HTML
comments.
I created the following transform matrix:
Left side is what the letter should be, the right side is the transformed
text.
An example looks like:
On Tue, 2003-08-26 at 18:57, Marcus C. Gottwald wrote:
Hello!
I wrote (Sun 2003-Aug-17 22:12:45 +0200):
About a quarter to a third of the spam mails which are getting
past my privately used spam filter (SpamAssassin 2.55, Debian
package version 2.55-3) are of type multipart/alternative
I have got amavis debug running. I have postfix setup to only filter incoming
(using a FILTER command in access_recipients). I have F-Prot installed.
Outgoing messages skip any scans.
Incoming messages only do virus scans, but no SA scans.
I am not sure that this is the problem, but when I
MC == Mike Carlson [EMAIL PROTECTED] writes:
MC Anyone have any issues after an upgrade to 4.8? I am thinking
MC something went south when I ran mergemaster on the sendmail.cf
MC file, but I am not certain since I didn't bother to save a backup
MC copy. I know, stupid of me, but this is my home
On Wed, 27 Aug 2003, 'Carlo Wood' wrote:
List of mailers of mails with msg-id without domain:
X-Mailer: Z-Mail (3.2.3 08feb96 MediaMail)
I haven't looked at the source in a while, but I'm almost certain this is
simply because IRIX's gethostname() doesn't return a FQDN, at least in
that
Simon Byrnand writes:
I was just thinking about the GA process and although I havn't looked at
it to see exactly how it works, I was wondering the following
Presumably it starts with a certain scoreset, runs the spam through, sees
what percentage score above 5, then runs the ham through
I think I have seen several people ask for this, but have not seen
answers. Maybe I missed them? Either way, if you want to tell me to
RTFM, please specify which FINE manual to read!
Can I get scores like this in the header? Can it be in the header of
email that is not spam too?
Thanks for
what do you see in /var/spool/qmailscanner/qmail-queue.log
Jennifer Fountain writes:
in the articles I am reading, you should see this in your
/var/log/maillog:
Jun 8 05:08:00 myhost spamd[11636]: info: setuid to qmailq succeeded
Jun 8 05:08:00 myhost spamd[11636]: checking message
[EMAIL
Simon Byrnand writes:
I was just thinking about the GA process and although I havn't looked at
it to see exactly how it works, I was wondering the following
Presumably it starts with a certain scoreset, runs the spam through,
sees
what percentage score above 5, then runs the ham
this file does not exist.
it is listed in my .pl file:
#Name of file in $scandir where debugging output goes
my $debuglog=qmail-queue.log;
-Original Message-
From: william f guyton jr [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 26, 2003 8:55 PM
To: Jennifer Fountain
Cc: [EMAIL
from http://relays.osirusoft.com/ :
Due to the severe drain of resources, relays.osirusoft.com will be down for
an undetermined period of time. Please ask all sites using data from
relays.osirusoft.com to stop until further notice.
Took a dozen tries just to load this simple text web page.
HTH
ok figured out why it was there... set to 1 :)
here a snip
Tue, 26 Aug 2003 21:31:48 -0400:8877: w_c: primary Content-Type of
text/plain found
Tue, 26 Aug 2003 21:31:48 -0400:8877: w_c: rename new msg from
/var/spool/qmailscan/working/tmp/server10619479084558877 to
I have been using spamassassin for a few days now and love it! I have been
able to set up whitelists for users in in user_prefs with no problems so
far. I do have two users that receive email from a yahoo group. Normally I'd
add the email of the list's email server to the user_prefs file and it
On Wed, Aug 27, 2003 at 03:34:46AM +0200, Marcus Schopen wrote:
I use amavisd-0.1. My sendmail is responsible for two domains (privat
and work stuff).
Depending on to which domain a user is sending an email, I'd like to
generate different notification emails if an virus is found. What's
Hi Dave,
-Original Message-
From: Yorkshire Dave
I'm not sure that having an @foo or @foo.localdomain
message-id actually breaks any standards, although it may bend them
slightly.
RFC822/2822 seem to refer mainly to the uniqueness of the message-id.
RFC2822(3.6.4) recommends
I was merrily using SpamAssassin (directly, ver 2.55, on Linux).
But the recent virus emails flooded my mailbox, and SpamAssassin tagged most
of them as good.
I then installed SpamProbe, and within just 100 messages, it got nearly all
of the 50-100 emails I get (mostly spam) tagged correctly..
Greetings,
I've got a small problem with SpamAssassin that I hope you can help me
with. I receive a significant amount of email forwarded through
another account. I don't have any access to the way SpamAssassin is
run on this account; it's run on every piece of mail. And it wraps the
message in a
By all means do it! :) ... but it won't help that there are still servers
that use the rbl directly from sendmail or postfix and the like.. :(
- Original Message -
From: Justin Mason [EMAIL PROTECTED]
To: Larry Rosenman [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
(Re-sending this, because it seems to have gotten missed in the scramble a
few days ago when I first sent it.)
I've got a weird situation going on with some rules I'm testing. I'm trying
to set up rules to catch various combinations of the real names (and
nicknames) of my users. (Not all of
BS == Brian Scott [EMAIL PROTECTED] writes:
BS I notice that many recent viruses are using faked return email
BS addresses.
BS Consequently, when one of these infected emails is detected by spam
BS assassin, many systems appear to reply to the fake email address with
BS an exact copy of the
Hello Gerry,
Tuesday, August 26, 2003, 8:25:24 AM, you wrote:
GM ... I do have two users that receive email from a yahoo group. ... is
GM there a way to single out a subject line for white lists in the
GM user_prefs file of spamassassin?
You probably don't want to do that.
Headers common to
On Monday, August 25, 2003 @ 3:24:20 AM [-0700], Simon Byrnand wrote:
On Friday, August 22, 2003 @ 1:56:26 PM [-0700], Tim Buck wrote:
So I've reverted back to SA 2.55. Anyone else see this behavior?
Tim...yes. I had an almost identical problem. Two or three users
suddenly started getting a
Nevermind. I found the answers at
http://www.ijs.si/software/amavisd/#faq-spam
Thanks anyway.
On Tue, 26 Aug 2003 19:27:02 -0500, Mike Vanecek wrote
I have got amavis debug running. I have postfix setup to only filter
incoming
(using a FILTER command in access_recipients). I have F-Prot
Hello,
I'm using 2.60 rc2.
Proposal: Should --lint check for orphan test scores?
Reasons: When we upgrade and we have custom scores in local.cf or user prefs
this will help us identify which tests are no longer in use.
Other: If we somehow spell a test name wrong in the score statement, it
By all means do it! :) ... but it won't help that there are still
servers
that use the rbl directly from sendmail or postfix and the like.. :(
And they will soon discover that they've been rejecting nearlly all mail
because of it, and remove relays.osirusoft.com
Regards,
Simon
On Wed, Aug 27, 2003 at 01:37:45PM +1000, Bill Maidment wrote:
I'm getting the following messages from time to time, usually on a
Sobig.F infected email. Anyone else seen this? Any fix available? Or is
this a mimedefang issue? I'm running mimedefang 2.36
Aug 27 13:23:34 mail3
Yea.. I guess if I didn't get email for an hour I would wonder whats
up.. but you gotta wonder about the people who start to wonder after a
few days... heh..
On Tue, 2003-08-26 at 20:34, Simon Byrnand wrote:
By all means do it! :) ... but it won't help that there are still
servers
that
Hi all
I'm getting the following messages from time to time, usually on a
Sobig.F infected email. Anyone else seen this? Any fix available? Or is
this a mimedefang issue? I'm running mimedefang 2.36
Aug 27 13:23:34 mail3 mimedefang-multiplexor: Slave 2 stderr: Failed to
run BAYES_00
Is there someway that I can edit the subject line to get the SA score in
there? I am using SA 2.55 and procmail.
TIA
jpf
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
On Tue, Aug 26, 2003 at 10:43:00AM -0700, Brian May wrote:
I though this was freaking funny... I've been reporting spam to the UCE
address for over 6 months, then today I get this (over 200 of them)
[EMAIL PROTECTED]: host arcticfox.ftc.gov[164.62.7.14] said: 550 5.7.1
[EMAIL
Hi Kai,
-Original Message-
From: Kai MacTane
body IMAGE_ATTACHMENT /filename=\[^\]+\.(gif|jpe?g)\/i
describe IMAGE_ATTACHMENT Has a GIF or JPEG attachment.
score IMAGE_ATTACHMENT 0.1
rawbody RAW_IMAGE_ATTACHMENT /filename=\[^\]+\.(gif|jpe?g)\/i
describe RAW_IMAGE_ATTACHMENT Has
On 26 Aug 2003 14:06:56 -0400 K Old [EMAIL PROTECTED] wrote:
Hello everyone,
I'm using the 2.55 version of SA and everything works great. I'm trying
to find a good way to parse the almost-certainly-spam and probably-spam
files that are produced by SA.Given that the majority of the mail
With all the trouble OSIRUSOFT is having, is it time to stop using them?
Those guys are overworking things...
My mailserver was blocked due to that i was located in a ip address
range that also had a nameserver on it. This nameserver was secondary
for a domain that also was primary on a
-Original Message-
From: jpf
Is there someway that I can edit the subject line to get the
SA score in there? I am using SA 2.55 and procmail.
You will have to double check me, but here is my attempt:
d = [0-9]
:0
* $ X-Spam-Status: Yes, hits=\/$d+\.$d
{
HITS = $MATCH
:0
Good morning,
now that osirusoft is officially dead, what should we SA admins do? Set
all scores for OSIRUSOFT related test to 0? Which are all the tests? Is
the following sufficient?
score RCVD_IN_OSIRUSOFT_COM 0
score X_OSIRU_DUL 0
score X_OSIRU_DUL_FH 0
score
Is it expected that 2.60 will produce the same level of score as 2.55?
I.e. if I have set a threshold of a score of 5.0, will I get the
same hit rate?
Geoff Gibbs
UK-Human Genome Mapping Project-Resource Centre,
Hinxton, Cambridge, CB10 1SB, UK
Tel: +44 1223 494530 Fax: +44 1223 494512 E-mail:
--On Tuesday, August 26, 2003 11:42 PM -0400 Theo Van Dinter
[EMAIL PROTECTED] wrote:
No, this is a GDBM issue. There's a bug already open for it, and we're
discussing what to do about it. Basically GDBM is stupid and doesn't
allow control chars in the token keys. Which kind of sucks. ;)
What
I must be doing something stupid, or have something misconfigured. My
server times out on Pyzor tests about 90% of the time, and on DCC tests
about 5-10% of the time. I've set the timeouts to 10 seconds. My
average message analysis time due to these tests taking so long is 13-15
seconds. It
Hi there!
As far as I can see in FAQ and manpages, there is no official way to provide
the envelope-sender (the SMTP-MAIL FROM: argument) to SA for furtehr
reference.
There are good reasons to have the Envelope-Sender at hand:
- the Sender: (as best bet) might be forged
- the envelope-sender
On Wed, Aug 27, 2003 at 04:27:46AM -0700, Kenneth Porter wrote:
What would be the downside of just encoding any non-printable character?
Like URL-encoding, or backslash-escaping.
The goal of the control chars is to use a sequence that won't ever appear
in a real message.
--
Randomly
This has been
discussed. The rules will not hit because of the embedded mime code. They simply
ignore past the first level. I'm hoping someone willwrite an eval for
this. As far as I know, no version of SA handles this. So we really need a
simple eval for it.
I'm still a
believer that we
Good-day!
We're using SA along with amavisd-new. After adding custom rules to our
site-wide local.cf file, we are desperately looking at a way to test them.
Currently amavisd-new's logs show always the same :
Aug 27 13:57:52 isosun21 amavisd[29954]: (29954-03) header: X-Spam-Status:
No,
-Original Message-
From: Bart Schaefer [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 26, 2003 10:48 AM
To: spamassassin_list
Subject: RE: [SAtalk] Custom Rules - spamd
On Tue, 26 Aug 2003, Chris Santerre wrote:
-Original Message-
From: Larry Gilson
On Wed, Aug 27, 2003 at 08:28:56AM +0200, Alexander Skwar wrote:
Good morning,
now that osirusoft is officially dead, what should we SA admins do? Set
all scores for OSIRUSOFT related test to 0? Which are all the tests? Is
the following sufficient?
score RCVD_IN_OSIRUSOFT_COM 0
score
Hi Chris,
Have the rules that you list here been working at all?
--Larry
-Original Message-
From: Chris Trudeau-Personal
This is a bit weird.
I have the following rules in my local.cf:
---
This sf.net email is sponsored
Hey all. With all the noise about Osirusoft, my mail server is
practically on its knees. I actually had to shut off network tests
for a few minutes to recover.
Anyway, thinking about this gave me an idea. I know that when SA
finds a message in the whitelist, it pretty much guarantees the
Hi Chris,
-Original Message-
From: Chris Santerre
Nope, sorry. Didn't catch that. THey are run from seperate cf
files in the /etc/mail/spamassassin dir. They are run for the
entire company! Every bit of email that enters company is
subject to all of these rules.
Matt's
After running it for a few days, I just noticed my 2.60 rc2 install of spamd
is creating new user's user_prefs file as mode 666.
It does create the .spamassasin directory mode 700 though.
Has anyone else seen this ? If not I'll delve deeper into what might be
wrong here.
This is on Solaris 8,
Wow I cant
believe this only scored a 4.8 this is way more offensive than the get a
bigger blank emails that get caught no problem. I assumed there would be a basic rule
that would look for child pornography in the title.
Any ideas
on how to boost scores on this kind of filth?
James
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 9:02 AM
To: [EMAIL PROTECTED]
Subject: [SAtalk] Testing site-wide custom rules, how to?
Good-day!
We're using SA along with amavisd-new. After adding custom
rules to our
I think that would be a bad idea. I jacked up the MS executable test to
+110 to make sure if some one was dumb enough to send an MS executable, but
was white listed, that the mail would still get tagged. Maybe as an option
it would be nice for some, such as
HALT_ON_WHITELISTED 1
or something
Here is how I do it - these lines are in
/etc/mail/spamassassin/local.cf on my system
# Whether to change the subject of suspected spam
rewrite_subject 1
# Text to prepend to subject if rewrite_subject is used
subject_tag [SPAM-Score-_HITS_]
jpf wrote:
Is there someway
On Tue, 2003-08-26 at 15:47, Jennifer Fountain wrote:
in the articles I am reading, you should see this in your
/var/log/maillog:
Jun 8 05:08:00 myhost spamd[11636]: info: setuid to qmailq succeeded
Jun 8 05:08:00 myhost spamd[11636]: checking message
[EMAIL PROTECTED] for qmailq:545.
Jun
I've noticed recently that spam is starting to creep through the cracks of
SA. I looked at one of them, and it seems this spammer is trying to foil
the spam-filters, especially Bayes.
The spam message contains a large number of dictionary words written in
HTML in WHITE, so they don't appear on
-Original Message-
From: Larry Gilson [mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 10:24 AM
To: 'Chris Santerre'; spamassassin_list
Subject: RE: [SAtalk] Custom Rules - spamd
Hi Chris,
-Original Message-
From: Chris Santerre
Nope, sorry. Didn't
On Wed, Aug 27, 2003 at 04:26:19PM +0200, Alexander Skwar wrote:
Rainer Sokoll wrote:
I think it is better to disable rblcheck for osirusoft completly in
20_head_test.cf:
Okay. What about those X_OSIRU_ tests? Are they related to
As far as I understand this, by disabling check_rbl,
jpf wrote:
Is there someway that I can edit the subject line to get the SA score in
there? I am using SA 2.55 and procmail.
TIA
jpf
Here is the top two lines from my local.cf file. Works great
rewrite_subject 1
subject_tag [SA Says: _HITS_]
It gives the following results:
[SA Says:
That has got to be the single funniest piece of spam I've seen in a long
time. :)
jherschel wrote:
-Original Message-
*From:* Tyler Madison [mailto:[EMAIL PROTECTED]
*Sent:* Wednesday, August 27, 2003 2:05 PM
*To:* [EMAIL PROTECTED]
*Subject:* Best Child Pornography Site
Welcome to
Hi all, I just received this spam, It made me laugh so I
thought to pass it on.
Welcome to the siteremoved
URL it's us again, now we extended our offerings,
here is a list: 1. Heroin, in liquid and crystal form. 2.
Rocket fuel and Tomohawk rockets (serious enquiries only). 3. Other
Greetings SA Community,
I have a simple Sendmail-Procmail-SA setup working on RH 9.0. It is
great!! Thank you SA developers and list posters. I have been reading this
list for a few weeks in order to scale the learning curve and do more
advanced things with all three of these tools. Although
Hi all,
Could anyone tell me if there is some free RBL ??
CR
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
Hi gurus,
Sorry if this is a little bit off topic but I´m in deep trouble. I´m running a Postfix
server for a couple of domains with just a few users.
The setup is pretty secure (I think) and and don't find any evidence in my logs that I
have an open relay. The problem is that I got a LOT of
Gerry Maddock [EMAIL PROTECTED] wrote:
I have been using spamassassin for a few days now and love it! I have
been able to set up whitelists for users in in user_prefs with no
problems so far. I do have two users that receive email from a yahoo
group. Normally I'd add the email of the list's
I was trying the following filter found on the suggested script sharing
page. For some reason it was tagging emails that had the word pizza in
them. Why?
body RAVEN_MaskedWordsF
/\b(?:excIusive|GiangBiang|sIut|ganigbainged|duides|hairdciore|ExcIude|pIz)/
i
describe RAVEN_MaskedWordsF
On Wed, 27 Aug 2003 17:56:19 +0200 Céline REDON [EMAIL PROTECTED] wrote:
Hi all,
Could anyone tell me if there is some free RBL ??
Yes, see http://openrbl.org and
http://www.declude.com/junkmail/support/ip4r.htm
-- Bob
---
This sf.net
On Wed, 27 Aug 2003, Morten Kjeldgaard wrote:
font color=#ffeutectic scarf tailing identifiable corresponded
Whenever I've seen this, it's looke like:
font color=#ffeutectic font color=#ffscarf font
color=#fftailing font color=#ffidentifiable font
color=#ffcorresponded
Thanx Bob,
Would you know also how to integrate them in Spamassassin?
In the local.cf file??
Thanx!!
CR
Selon Bob Apthorpe [EMAIL PROTECTED]:
On Wed, 27 Aug 2003 17:56:19 +0200 Céline REDON [EMAIL PROTECTED]
wrote:
Hi all,
Could anyone tell me if there is some free RBL ??
Yes, see
On 08/27/03 05:52 PM, David sat at the `puter and typed:
Hi gurus,
Sorry if this is a little bit off topic but I´m in deep trouble. I´m
running a Postfix server for a couple of domains with just a few
users.
The setup is pretty secure (I think) and and don't find any evidence
in my logs
Patrick Morris wrote:
That has got to be the single funniest piece of spam I've seen in a long
time. :)
jherschel wrote:
-Original Message-
*From:* Tyler Madison [mailto:[EMAIL PROTECTED]
*Sent:* Wednesday, August 27, 2003 2:05 PM
*To:* [EMAIL PROTECTED]
*Subject:* Best Child
--On Wednesday, August 27, 2003 11:37:26 -0500 Robin Witkop-Staub
[EMAIL PROTECTED] wrote:
I was trying the following filter found on the suggested script sharing
page. For some reason it was tagging emails that had the word pizza in
them. Why?
body RAVEN_MaskedWordsF
Lol - yeah, I think it's DEA or something trying to set up a sting ;-)
... But is there a rule I could tweak to get something as obvious as child
pornography blasted as spam?
James Herschel
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Patrick
Morris
Hi, SpamAssassin folks.
I've been using SpamAssassin happily for the past 6 months or so, and
it's dramatically reduced my amount of spam.
Recently, I upgraded to 2.60rc2 for the upgraded rules sets (I was
getting a ton of spams with false X-Mailer headers set to Emacs Gnus
coming through).
On Wed, 27 Aug 2003, Rick Macdougall wrote:
Patrick Morris wrote:
That has got to be the single funniest piece of spam I've seen in a long
time. :)
jherschel wrote:
-Original Message-
*From:* Tyler Madison [mailto:[EMAIL PROTECTED]
*Sent:* Wednesday, August 27, 2003
1 - 100 of 169 matches
Mail list logo
