Re: more habeas spam

2009-01-07 Thread Anthony Peacock
LuKreme wrote: On 6-Jan-2009, at 08:51, Greg Troxel wrote: I realize that HABEAS_ACCREDITED_SOI has or had a reasonable ruleqa value. But, I wonder if SA should apply higher standards than that, and not give negative scores to databases that don't behave reasonably. This has been brought up

add a score for same From: and To:

2009-01-07 Thread Phibee Network Operation Center
Hi anyone have a rules for increase the score when the from: are same that to: ? Thanks jerome

Re: What multibyte character encoding convention is this?

2009-01-07 Thread Kai Schaetzl
Robert Nicholson wrote on Tue, 6 Jan 2009 21:59:04 -0600: does anybody recommend this? for what? It's garbage and remains garbage. ;-) Any non-ASCII characters in the header have to be Q- or B-encoded (=?Utf-8?B?.?=). If they are not they will just display as the corresponding ASCII

Re: add a score for same From: and To:

2009-01-07 Thread Kai Schaetzl
This is lame, read the archives. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: New spam-to me-and how do I stop.

2009-01-07 Thread Craig
Randy rramsd...@livedatagroup.com 1/6/2009 2:42 PM Craig wrote: Randy rramsd...@livedatagroup.com 1/6/2009 2:18 PM Craig wrote: Hello All- I have recently been getting MANY spam slipping through Spamassassin and I am looking for help on how to stop. I have used Spamassassin

Re: New spam-to me-and how do I stop.

2009-01-07 Thread McDonald, Dan
On Wed, 2009-01-07 at 07:54 -0600, Craig wrote: Randy rramsd...@livedatagroup.com 1/6/2009 2:42 PM Craig wrote: Post 3 similar messages on pastbin so that we can determine a common factor between them. Use pastbin, not this list to post the message. Pastbin-I am not familiar with

Re: add a score for same From: and To:

2009-01-07 Thread Matt Kettler
Phibee Network Operation Center wrote: Hi anyone have a rules for increase the score when the from: are same that to: ? Yes, there was a thread about this just a few days ago. See TO: and FROM: line are the same. from 1/4/2008 in the archives.

Shades-of-greylisting: custom rule creation?

2009-01-07 Thread Don Levey
[I've not yet found in the archives something which addresses this question; if I missed it I apologise] I am trying to set up a system whereby I can create lists of addresses/servers of varying degrees of spamminess. For example, I might have three lists: From server

Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Florian Lagg
Hello! In the last few days my Spamassassign does not filter a (for me) new kind of spam. I have an idea how to fight this spam and want to ask the list if this is possible with SA. First a short analysis of what's going on: 1st fact: I get mails like this one: ---

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Theo Van Dinter
On Wed, Jan 07, 2009 at 04:46:44PM +0100, Florian Lagg wrote: So - if possible - I want spamassassign to: 1. Request the links in the mail body and check them for http-error 302 or meta redirects 2. Check the links we got by doing this against some DNSBL's Is this possible? Is there a

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Greg Troxel
Besides the DDOS issue, there's a privacy issue, which is messy with DNSBLs already. Nothing SA does should send network traffic to a place controlled by the mail sender. Checking a DNSBL for which there's some reason to believe they aren't underhanded is one thing, but fetching stuff from a

AND logical operation for scoring options

2009-01-07 Thread ml
Concerning scoring options defined on “user_prefs”, is there a way to apply AND logical operation for two or more SYMBOLIC_TEST_NAMEs describing like “score A B 2.0”? If it is not available now, let me know how to react as a temporary resolution. In case that (A || B) sometimes appears on

Re: New spam-to me-and how do I stop.

2009-01-07 Thread Craig
Randy rramsd...@livedatagroup.com 1/6/2009 2:42 PM Craig wrote: Randy rramsd...@livedatagroup.com 1/6/2009 2:18 PM Craig wrote: Hello All- I have recently been getting MANY spam slipping through Spamassassin and I am looking for help on how to stop. I have used Spamassassin

Re: AND logical operation for scoring options

2009-01-07 Thread Theo Van Dinter
rtm for meta rules :) On Wed, Jan 07, 2009 at 09:45:18AM -0800, ml wrote: Concerning scoring options defined on “user_prefs”, is there a way to apply AND logical operation for two or more SYMBOLIC_TEST_NAMEs describing like “score A B 2.0”? If it is not available now, let me know how to

Re: New spam-to me-and how do I stop.

2009-01-07 Thread Craig
Links would help- http://pastebin.com/d59f95b6d http://pastebin.com/d17f12f4 http://pastebin.com/m46ce2877 Craig ccanfi...@unitedwayqc.org 1/7/2009 11:46 AM Randy rramsd...@livedatagroup.com 1/6/2009 2:42 PM Craig wrote: Randy rramsd...@livedatagroup.com 1/6/2009 2:18 PM Craig

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Henrik K
On Wed, Jan 07, 2009 at 12:44:39PM -0500, Greg Troxel wrote: Besides the DDOS issue, there's a privacy issue, which is messy with DNSBLs already. Nothing SA does should send network traffic to a place controlled by the mail sender. Checking a DNSBL for which there's some reason to believe

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Raymond Dijkxhoorn
Hi! Besides the DDOS issue, there's a privacy issue, which is messy with DNSBLs already. Nothing SA does should send network traffic to a place controlled by the mail sender. Checking a DNSBL for which there's some reason to believe they aren't underhanded is one thing, but fetching stuff

Re: AND logical operation for scoring options

2009-01-07 Thread Benny Pedersen
On Wed, January 7, 2009 18:45, ml wrote: In case that (A || B) sometimes appears on non-spams but (A B) frequently appears on spams, meta test (A B) -- Benny Pedersen Need more webspace ? http://www.servage.net/?coupon=cust37098

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Benny Pedersen
On Wed, January 7, 2009 19:05, Raymond Dijkxhoorn wrote: Besides that, its a perfect way to ack your address to them. If they make a url like blah.at.blah.com and thats corresponding to your address, like this or url encoded they know your address is active, real handy. it olso works on

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Jeff Mincy
From: Theo Van Dinter felic...@apache.org Date: Wed, 7 Jan 2009 11:36:18 -0500 On Wed, Jan 07, 2009 at 04:46:44PM +0100, Florian Lagg wrote: So - if possible - I want spamassassign to: 1. Request the links in the mail body and check them for http-error 302 or meta

AW: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Florian Lagg
You can look at the WebRedirect plugin on http://wiki.apache.org/spamassassin/CustomPlugins Possible? Sure. Should? Not unless you want to turn your (and anyone else running that code's) machine into a DDoS client. In other words, while it's possible to shoot yourself

Spamassassin CustomRules errors

2009-01-07 Thread chenzhen yu
hi,I need your help I used a group of CustomRules with big5 charset but all email I sent will get the spam score from several specific lines of CustomRules but there is no any words matched in the email.I have used many emails to test and was sure that the rules is right written.If I change the

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Rob McEwen
Florian Lagg wrote: In the last few days my Spamassassign does not filter a (for me) new kind of spam. I have an idea how to fight this spam and want to ask the list if this is possible with SA. snip More examples: -- Hey! Do you believe that when New Year

Daily run output

2009-01-07 Thread Simon.Baker
Hi, We have a spamassassin server filtering our companies emails currently. Each day we recieve an email from the root account of our server overviewing the previous days spam filtered emails, network status and disk status. As i was not the one who setup the server, i'm not sure exactly how

Re: Daily run output

2009-01-07 Thread Evan Platt
AFAIK, that's not part of SpamAssassin, so you'd need to find whatever is generating that e-mail and change it. I'm sure I'll be corrected if I'm wrong, but this isn't an option I'm aware of. At 09:18 PM 1/7/2009, you wrote: Hi, We have a spamassassin server filtering our companies emails

RE: Daily run output

2009-01-07 Thread Rubin Bennett
-Original Message- From: Simon.Baker [mailto:simon_ba...@medfin.com.au] Sent: Thursday, January 08, 2009 12:19 AM To: users@spamassassin.apache.org Subject: Daily run output Hi, We have a spamassassin server filtering our companies emails currently. Each day we recieve an email from

Re: New spam-to me-and how do I stop.

2009-01-07 Thread Matus UHLAR - fantomas
On 07.01.09 11:46, Craig wrote: X-Mailer: Novell GroupWise Internet Agent 7.0.2 HP Randy rramsd...@livedatagroup.com 1/6/2009 2:42 PM Post 3 similar messages on pastbin so that we can determine a common factor between them. Use pastbin, not this list to post the message. I have 3