Re: Upgrading

Hi Grant, First update the ports (see the handbook how (cvsup-without-gui and portupgrade)) After this you'll run portupgrade -a Jack - Original Message - From: "Grant Peel" <[EMAIL PROTECTED]> To: Sent: Monday, September 15, 2008 10:58 PM Subject: Upgrading Hi all, What would

Re: New Day old Bread list trick

Marc Perkel wrote: Blaine Fleming wrote: Marc Perkel wrote: Blaine Fleming wrote: Marc Perkel wrote: I just discovered the "Day old Bread" list of host names under 5 days old. I don't know where they get it but the list is very useful. I remember playing with this list a few years ago b

Re: New Day old Bread list trick

Blaine Fleming wrote: Marc Perkel wrote: Blaine Fleming wrote: Marc Perkel wrote: I just discovered the "Day old Bread" list of host names under 5 days old. I don't know where they get it but the list is very useful. I remember playing with this list a few years ago but now they seem to

Re: New Day old Bread list trick

Marc Perkel wrote: Blaine Fleming wrote: Marc Perkel wrote: I just discovered the "Day old Bread" list of host names under 5 days old. I don't know where they get it but the list is very useful. I remember playing with this list a few years ago but now they seem to lag a few days behind.

RE: SPAM message received - but should not have been delivered. [Solved]

Hello Matt, > > So, does anyone have a clue as to why the E-Mail in question was > > delivered to our domain? Or even, why would our servers try to deliver > > a message who's recipients don't exist here? > > > I see nothing in those headers that would indicate who the recipients are. > > To:. Cc

Re: SPAM message received - but should not have been delivered.

Michael Hutchinson wrote: > > Hello everyone. > > > > I regularly do a Bayes training run every week on any missed Spam that > I collect from various places on the network. I picked some up from a > co-worker and began to analyse the headers to determine any Spammyness > I could write a S.A rule

SPAM message received - but should not have been delivered.

Hello everyone. I regularly do a Bayes training run every week on any missed Spam that I collect from various places on the network. I picked some up from a co-worker and began to analyse the headers to determine any Spammyness I could write a S.A rule to bump the score up with. This is when I

Re: New Day old Bread list trick

Blaine Fleming wrote: Marc Perkel wrote: I just discovered the "Day old Bread" list of host names under 5 days old. I don't know where they get it but the list is very useful. I remember playing with this list a few years ago but now they seem to lag a few days behind. For example, as of r

RE: Erroneous doubled letters in subject

--On Monday, September 15, 2008 1:26 PM -0700 RobertH <[EMAIL PROTECTED]> wrote: Are these rules we can keep there indefinitely, or do they get migrated into future SA releases and should be removed? Also, I notice on SA 3.2.5 there were several linting issues. Ill look closer at the warnings

Re: New Day old Bread list trick

Marc Perkel wrote: I just discovered the "Day old Bread" list of host names under 5 days old. I don't know where they get it but the list is very useful. I remember playing with this list a few years ago but now they seem to lag a few days behind. For example, as of right now, 'superbleached

Re: sa-learn and different parh

Hi Matt, > su yourself to the spamassassin user before performing sa-learn calls. Thanks 1K hor your help :) -- Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/ "It's easier to invent the future than to predict it." -- Alan Kay

RE: Skip scanning for large mails

> From: Evan Platt [mailto:[EMAIL PROTECTED] > > Rosenbaum, Larry M. wrote: > > > > We just received a 419 spam with a 642 KB JPG file. It would be nice > if SpamAssassin could at least look at the text of messages like that. > > > > > Wouldn't FuzzyOCR pick up on that? Not if spamc never passes

Upgrading

Hi all, What would the reccomended procedure be for upgrading SA from 3.001008 to 3.002003 and then staying up to date. This would be on FreeBSD 6.n, with the original SA installed from ports. TIA, -Grant

Re: Skip scanning for large mails

Rosenbaum, Larry M. wrote: We just received a 419 spam with a 642 KB JPG file. It would be nice if SpamAssassin could at least look at the text of messages like that. Wouldn't FuzzyOCR pick up on that?

RE: Erroneous doubled letters in subject

> > Cool! I've added it as a test rule in my environment and will bump up the > score once I see how it goes. > > For others looking for the rule, see here: > > .cf?revision=695394&view=markup> > Are these rules we ca

Re: Searching for a line-pattern

If pastebin doesn't work for you because of it's spam filter (lots of humor to be found in there somewhere) try another one like slexy.org. Not as good, but it seems to lack any sort of spam filter. As for your problem, maybe you can see if Day Old Bread is picking up on the URL spam you're seein

Re: Erroneous doubled letters in subject

--On Monday, September 15, 2008 10:36 AM +0100 Justin Mason <[EMAIL PROTECTED]> wrote: good tip! I've just added PR_TD_NOWRAP and PR_TD_NOWRAP_BAT to test these out... Cool! I've added it as a test rule in my environment and will bump up the score once I see how it goes. For others lookin

RE: Skip scanning for large mails

> From: mouss [mailto:[EMAIL PROTECTED] > > Rosenbaum, Larry M. wrote: > >> From: mouss [mailto:[EMAIL PROTECTED] > >> > >> The samples I looked at could easily be stopped otherwise (I don't > >> "usuall" get a lot of lottery mail with a large .tif from a gmail > >> address!!). but it's not worth t

RE: Skip scanning for large mails

Gene Heskett wrote: > On Saturday 13 September 2008, mouss wrote: > > > > don't use RDJ. use a recent version of SA and use sa-update. I use > > 3.2.5 with JM Sought rules and few SARE rules. The latter haven't > > been updated since long, but this is normal (they are considered > > stable). > >

Re: Skip scanning for large mails

Rosenbaum, Larry M. wrote: From: mouss [mailto:[EMAIL PROTECTED] The samples I looked at could easily be stopped otherwise (I don't "usuall" get a lot of lottery mail with a large .tif from a gmail address!!). but it's not worth the pain. if spammers start sending large messages, things will cha

RE: Skip scanning for large mails

> From: mouss [mailto:[EMAIL PROTECTED] > > The samples I looked at could easily be stopped otherwise (I don't > "usuall" get a lot of lottery mail with a large .tif from a gmail > address!!). but it's not worth the pain. if spammers start sending > large > messages, things will change... We just

Re: New Day old Bread list trick

On Monday 15 September 2008, Marc Perkel wrote: >I just discovered the "Day old Bread" list of host names under 5 days >old. I don't know where they get it but the list is very useful. > >As many of you know I also track hosts that don't use the QUIT command >to close connections. So it occurred to

Re: New Day old Bread list trick

Great minds think alike. :) What I'm doing is a modification of this. I'm using the Day old Bread list but only adding IF they also skip the QUIT to close the connection AND I'm subtracting out my white list. Curtis LaMasters wrote: This is quite an interesting trick. Never actually thought

Re: New Day old Bread list trick

This is quite an interesting trick. Never actually thought about it. I did a quick Google and found this. http://mail-archives.apache.org/mod_mbox/spamassassin-users/200704.mbox/[EMAIL PROTECTED] If that is any help. DNSRBL format would be best for me. Curtis LaMasters http://www.curtis-lamast

New Day old Bread list trick

I just discovered the "Day old Bread" list of host names under 5 days old. I don't know where they get it but the list is very useful. As many of you know I also track hosts that don't use the QUIT command to close connections. So it occurred to me that if a domain is less than 5 days old AND

Re: Searching for a line-pattern

Dear Guennadi Liakhovetski, In message <[EMAIL PROTECTED]> you wrote: > > Was this patch correct then? > > http://lists.denx.de/pipermail/u-boot/2008-July/037375.html > > So, we jules are no longer listed and (b) the score will be 2.0 if buth > subrules match and zero otherwise. > > > Martin