Re: [SAtalk] Changed spammer technique ?

2003-11-09 Thread Jack L. Stone
At 01:13 PM 11.9.2003 +0100, Brian Ipsen wrote: Hi! Consider the following headers: Return-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: (qmail 323 invoked by uid 615); 9 Nov 2003 00:28:19 - Received: from [EMAIL PROTECTED] by worf.andebakken.dk by uid 81 with

[SAtalk] Re: Changed spammer technique ?

2003-11-09 Thread Bob Proulx
Brian Ipsen wrote: Consider the following headers: Received: from adsl-66-159-202-147.dslextreme.com (HELO andebakken.dk) (66.159.202.147) From: michael [EMAIL PROTECTED] To: [EMAIL PROTECTED] The spammer uses my own email address as sender to try to inject spam into my system For a

Re: [SAtalk] Changed spammer technique ?

2003-11-09 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brian Ipsen writes: The spammer uses my own email address as sender to try to inject spam into my system - in combination with TMDA this just causes the confirmation request be bounced/ /dev/null'ed - and I won't the the message anyway... Is

[SAtalk] Re: Postfix Spamtrap Configuration

2003-11-09 Thread Lukreme
On 31 Oct 2003, at 14:54, Patrick von der Hagen wrote: If your users use IMAP it might be easier to have them copy their mails to a special folder (either a private one or a shared one) and have spamassassin regularly learn all mails in this folder(s). I'm interested in this approach. What is

[SAtalk] OT: Postfix UCE config reference

2003-11-09 Thread Bob Proulx
For the postfix user who is getting a lot of spam to them from spoofed them, here is a nice quick howto for configuring postfix to prevent that and to reject those messages at the MTA level. http://jimsun.LinxNet.com/misc/postfix-anti-UCE.txt Rejecting messages from me to me was significant at

[SAtalk] (semi)automatic Razor reporting options? anyone done it like thi s before?

2003-11-09 Thread mwestern
I have a very good working razor/spam assassin or 4 to be exact. i want to make a mailbox which i can simply forward spam to from any mail client and it will report to razor automatically. 1. i'll be calling it something very hard to guess for spammers to send to. ie [EMAIL PROTECTED] 2. i

[SAtalk] Re: scoring system and values...

2003-11-09 Thread Lukreme
On 07 Nov 2003, at 08:29, Maarten J H van den Berg wrote: Just being curious at how this system came about... As I understand it by feeding millions of spam and ham messages to the filters and seeing what sticks. Now, for your purposes, subjects with [word blacklisted by stupid list server]

[SAtalk] a web-of-trust for antispam

2003-11-09 Thread Justin Mason
Folks -- Recently, there's been some work on getting a rudimentary web of trust up and running for antispam -- fundamentally, for whitelisting mail servers. More details at: http://www.web-o-trust.org/ --j. --- This SF.Net email sponsored

Re: [SAtalk] Re: scoring system and values...

2003-11-09 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lukreme writes: Now, for your purposes, subjects with [word blacklisted by stupid list server] might be exclusively spam. They might not be exclusively spam for others. That's why you can override any score in your own cf file. If you want to

[SAtalk] Re: scoring system and values...

2003-11-09 Thread Lukreme
On 08 Nov 2003, at 22:34, Dan Kohn wrote: I recommend allowing mistake-based training of the small number of false negatives (I use procmail for this as described at http://www.dankohn.com/archives/000323.htm). that link does not load. -- Athene we all have our moments when we lose it Slyspy the

Re: [SAtalk] a web-of-trust for antispam

2003-11-09 Thread Kenneth Porter
--On Sunday, November 09, 2003 6:23 PM -0800 Justin Mason [EMAIL PROTECTED] wrote: Recently, there's been some work on getting a rudimentary web of trust up and running for antispam -- fundamentally, for whitelisting mail servers. More details at: http://www.web-o-trust.org/ Sounds

[SAtalk] Curn?!

2003-11-09 Thread Kenneth Porter
This seems to be the new favorite porn euphemism of spammers. (Often with a dot or other punctuation in the middle.) What's needed to get SA to start recognizing it as a synonym for cum? --- This SF.Net email sponsored by: ApacheCon 2003,

[SAtalk] Re: scoring system and values...

2003-11-09 Thread Lukreme
On 08 Nov 2003, at 06:46, Terry Milnes wrote: Some of us though are system administrators and need a solution to offer to the end users. The typical end user wants to open their email and see no spam, period. Since the definition of spam varies from person to person that is simply not possible

RE: [SAtalk] Re: scoring system and values...

2003-11-09 Thread Dan Kohn
Sorry about that. Try adding an l: http://www.dankohn.com/archives/000323.html - dan -- Dan Kohn mailto:[EMAIL PROTECTED] http://www.dankohn.com/ tel:+1-650-327-2600 -Original Message- From: Lukreme [mailto:[EMAIL PROTECTED] Sent: Sunday, November 09, 2003 19:04 To: [EMAIL

[SAtalk] Subject Tagging

2003-11-09 Thread Josh Baird
I have Spamassassin running with qmail+vpopmail. I am having troubles getting spamd to tag the subject of a spam email. Here is the output of maillog: Nov 9 00:22:43 mail spamd[85995]: identified spam (12.5/5.5) for qmailq:85 in 1.6 seconds, 2881 bytes.Nov 9 00:22:43 mail