Re: How to increase score of URIDNSBL?

I don't know what all rules hit on this for you, but there are some SARE rules that should have triggered, and there will be some new ones very soon for the "display:none" trick. Between those and surbl, most of your spams of this sort should be caught. If you aren't running bayes, you might cons

How to increase score of URIDNSBL?

I recieved a spam (http://www.keystreams.com/~volfman/spamd-msg.txt - I stripped the X-Spam headers from the message) that only scored a 4.4, even though the URIDNSBL showed a hit. Here is the debug from spamd - http://www.keystreams.com/~volfman/spamd-debug.txt Is upping the score that a URID

Re: More spam humor :-)

On Sun, 5 Jun 2005, List Mail User wrote: > My favorite, for a long time has been: > > ... my name is Linda. I teach 4'th grade math class at a junior h i g h. ... > > I think I got about 20 copies of that message. > > Paul Shupak Ah, but you have to understand she's teaching Ne

Re: Unsubsribe

From: "Satheswaran Narayannan" <[EMAIL PROTECTED]> > Hi there, > > Can you please guide me how to unsubscribe from this mailling list. Many > thanks in advance for you help. > > regards, >From the headers of your message: list-help: list-unsubscribe:

Re: Unsubsribe

On Mon, Jun 06, 2005 at 10:32:56AM +0800, Satheswaran Narayannan wrote: > Can you please guide me how to unsubscribe from this mailling list. Many > thanks in advance for you help. Simply send a message to [EMAIL PROTECTED] from the appropriate address. :) -- Randomly Generated Tagline: "I'd rat

Re: More spam humor :-)

>... >Hello, > >My name is Jill and I'm a student at NYU. >I've always wanted to be a model and an >actress and I just added my webcam to this >site. http://www.upstatebeef.info/nc3/ > >- > >I don't know if Jill is real and really interested in people getting to her >web page(s)

Long scan times

Are you guys seeing long scantimes? I'm trying to pinpoint the cause.

Re: Re[2]: Worst "Establishment" or "Household Name" Pseudo-Spammers

>Saturday, June 4, 2005, 1:39:42 PM, Paul wrote: > >>>Sounds like you are giving them the "benefit of the doubt"... which is fine. >>> >LMU> I did give each one a unique email account, so I can >LMU> say with fair certainty, that none has ever sent anything to my "regular" >LMU> personal accounts (

Unsubsribe

Hi there, Can you please guide me how to unsubscribe from this mailling list. Many thanks in advance for you help. regards,

More spam humor :-)

Subject: NYU_Hottie's Web page Hello, My name is Jill and I'm a student at NYU. I've always wanted to be a model and an actress and I just added my webcam to this site. http://www.upstatebeef.info/nc3/ - I don't know if Jill is real and really interested in people getting t

Re: Block empty zip files

> it, but I was wondering what test could check for > UEsFBg== in a mime part Ah. Tricky. That has the disadvantage of being a non-text mime part, so SA tends to throw them in the trash. Nothing will find it on 2.6x, other than perhaps a modification of the MICROSOFT_EXE

Re: Block empty zip files

From: "Ben Wylie" <[EMAIL PROTECTED]> > > Get Tim Jackson's bogus virus bounce ruleset. > > I've just added that ruleset but it didn't help as far as I can see. > I have two custom rules which hit the text in the email, and spf also caught > it, but I was wondering what test could check for > UEsF

RE: Block empty zip files

> Get Tim Jackson's bogus virus bounce ruleset. I've just added that ruleset but it didn't help as far as I can see. I have two custom rules which hit the text in the email, and spf also caught it, but I was wondering what test could check for UEsFBg== in a mime part Here

Re: Received header not parsed

> I am using 3.0.3 on Windows 2003. > What is the fix? Will it recognise it as a received header even though it is > invalid? No. Well, I believe there have been some changes in received header parsing, so some valid headers not recognized on .3 will be correctly recognized. But this isn't that

RE: Received header not parsed

>> Why was the second header not parsed? > > Invalid format. Need "from" as the first word, not "(from". Ok thanks. I don't know why it has it in that format. It was put in by my AV proxy, which usually has valid headers: Received: from a.mx.bluesine.com ([66.18.211.109]) by server. (NAVGW 2.5.

Re[2]: Worst "Establishment" or "Household Name" Pseudo-Spammers

Saturday, June 4, 2005, 1:39:42 PM, Paul wrote: >>Sounds like you are giving them the "benefit of the doubt"... which is fine. >> LMU> I did give each one a unique email account, so I can LMU> say with fair certainty, that none has ever sent anything to my "regular" LMU> personal accounts (like th

Re: sa-learn error message

>> Everything seems to work OK, but I get one error message. >> When I run sa-learn --sync I get >> "Parameter to use lib must be directory, not file at >> $HOME/local/lib/perl5/i386-linux/Razor2/Client/Agent.pm line 13" > > Just from the error message, I would assume you had set up Razor, or at >

Re: sa-learn error message

> Everything seems to work OK, but I get one error message. > When I run sa-learn --sync I get > "Parameter to use lib must be directory, not file at > $HOME/local/lib/perl5/i386-linux/Razor2/Client/Agent.pm line 13" Just from the error message, I would assume you had set up Razor, or at least ena

Re: sa-learn error message

On Sun, Jun 05, 2005 at 08:22:40PM +0100, Mike Spamassassin wrote: > Everything seems to work OK, but I get one error message. > When I run sa-learn --sync I get > "Parameter to use lib must be directory, not file at > $HOME/local/lib/perl5/i386-linux/Razor2/Client/Agent.pm line 13" > > Can anyone

sa-learn error message

I have installed SpamAssassin 3.0.3 on Debian Linux using the SingleUserUnixInstall instructions on the SpamAssassin Wiki, as I do not have root access. Perl version is 5.6.1 Everything seems to work OK, but I get one error message. When I run sa-learn --sync I get "Parameter to use lib must be di

Re: Received header not parsed

> Received: (from localhost [218.232.123.135]) > by server. (NAVGW 2.5.2.12) with SMTP id M2005060510393927686 > for <[EMAIL PROTECTED]>; Sun, 05 Jun 2005 10:39:39 +0100 > > Why was the second header not parsed? Invalid format. Need "from" as the first word, not "(from". > It was given an all

Received header not parsed

This email arrived today: Received: from [127.0.0.1] by arkbb.co.uk with SMTP (HELO server.) (ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.7.9)); Sun, 5 Jun 2005 10:40:10 +0100 Received: (from localhost [218.232.123.135]) by server. (NAVGW 2.5.2.12) with SMTP id M200506051039392

Re: Block empty zip files

Get Tim Jackson's bogus virus bounce ruleset. Loren

Block empty zip files

I get quite a lot of empty zip files, I presume from viruses having failed to place themselves in them. They always look like: UEsFBg== in base64. Do others get these emails? Could someone advice me as to what kind of rule I could write to block these? I presume a body r

Re: Well, sometimes they have an (inadvertant?) sense of humor...

>... > >X-Originating-Server: inaccessible.scottishaccommodationindex.com > >Hey, just what I want! An inaccessible Scottish Accomodation! I'll look >one right up on the web! > >Loren > > Looks like an idiot for an administrator; The registration data is invalid/incorrect - but d

Re: return-path test

David B Funk wrote: On Sat, 4 Jun 2005, Craig Jackson wrote: I notice that the return-path: is often different from the from: But my return-path: tests all fail. Here's one: header RETPATH_NUMS_CJ Return-path =~ /[0-9]{6,}/ score RETPATH_NUMS_CJ 3.000 It will successfully match From:addr or

Fedora Legacy Test Update Notification: spamassassin (fwd)

Personally I'd recommend updating to 3.0.3 but some admins need to stay with the old stuff. For those interested in moving up to v3, see this page: Forwarded Message Date: Saturday, June 04, 2005 3:26 PM -0400 From