Re: spam

2006-12-05 Thread John Andersen
On Monday 04 December 2006 15:35, Evan Platt wrote: > >How in the hell does one write a  rule for this sh*? > > Maybe a rule if the message body is less than characters? > > I mean unless you expect lots of legitimate mail that says > "Hello." Oh crap, there go all my "test" mails -- __

Re: Scan Messages according to arrival

2006-12-05 Thread Anthony Peacock
Hi, leemansvg wrote: Hello, I don't know if anyone has come across this, but my Mailscanner/spamasssasin/sendmail bunch seems to scan messages randomly. I noticed this because it once got behind on scanning mail and it started to scan the ones that came in immediately first. Is there a setting

Re: Recognizing Sendmail's authentication -- patch included (WAS: How is LOCAL_AUTH_RCVD used?)

2006-12-05 Thread Jo Rhett
René Berber wrote: Or send me a copy of your recieved line and I'll do the patch for you. The change I made works on a test from someone that was on vacation and sending a message (to me) using his ISP account, the header includes a lot of extra text with the usual dynamic IP stuff and "may be

Re: 5 digit probe spam?

2006-12-05 Thread Yet Another Ninja
On 12/5/2006 7:27 AM, Marc Perkel wrote: Is anyone else getting these? Messages with a random subject and the message is a 5 digit number. What is it? aren't those digits the password for a password protected Bagle variant? I'd bet some braindead AV strips the infected attachements and lets

first received header forged

2006-12-05 Thread Alex Handle
Hi, recently i saw a lot of spam that didn't get catched by spamassassin. All the messages have in common that the first received header ist forged. Here an example: Received: from 141.88.223.236 (HELO mx1.ihk.de) by mydomain.at with esmtp (08E71A-P)@7X K0'+V) id 76)4Y6-5>0O4:-+8

Re: Recognizing Sendmail's authentication -- patch included (WAS: How is LOCAL_AUTH_RCVD used?)

2006-12-05 Thread René Berber
Jo Rhett wrote: > René Berber wrote: >> Jo Rhett wrote: >> >>> René Berber wrote: If I change Received.pm, line 414, like this: # Sendmail, MDaemon, some webmail servers, and others - elsif (/^from .*?(?:\]\)|\)\]) .*?\(.*?authenticated.*?\).*? by/) { + elsif (/^from .*

<    1   2