RobertH a écrit :
>
>
>> No. Scoring based on single-words is pretty much the
>> opposite of the SA approach. That's all I was saying.
>>
>
> karsten,
>
> i get the SA approach
>
> and to the no answer, baloney
>
> this word should get a *HIT* no mattter how small it is scored.
>
if you
funny story: we just got an inquiry from a large ISP in 'that country'
to implement a hosted anti-spam solution for them.
Seems we were the only company that they looked at that didn't block
email to/from or mentioning 'that country'.
(other providers they emailed blocked their email!)
They
On Sat, January 31, 2009 12:40, mouss wrote:
> The above assumes you don't get (much) mail from these countries.
> adjust the score as you see fit. and of course, use at your own rix.
i see more spam from outside this countrys, eg 419 spams not sent
from there anyway, botnet sooks :)
--
http://
Benny Pedersen a écrit :
> On Sat, January 31, 2009 12:40, mouss wrote:
>> The above assumes you don't get (much) mail from these countries.
>> adjust the score as you see fit. and of course, use at your own rix.
>
> i see more spam from outside this countrys, eg 419 spams not sent
> from there an
On Sat, Jan 31, 2009 at 12:40:24PM +0100, mouss wrote:
>
> if you use the RelayCountry plugin, you can add rules for a few countries:
If you are lazy, here is about all of africa..
header RELAYED_419 X-Relay-Countries =~
/\b(?:AO|B[IJW]|C[DFGIMV]|DJ|E[RT]|G[AHMNQW]|K[EM]|L[RS]|M[WZ]|N[AEG]|RW|S
At 22:39 30-01-2009, RobertH wrote:
when an email comes in with the word nigeria in it, it should get scored
something.
You could score the content if it mentions a country in Africa. We
then have to obfuscate the words so that we can mention them on this
mailing list. It's better to use Ba
>
> You could score the content if it mentions a country in
> Africa. We then have to obfuscate the words so that we can
> mention them on this mailing list. It's better to use Bayes
> to deal with that type of email.
>
> Regards,
> -sm
>
>
actually, one does not have to obfuscate a w
thanks mouss
u the reason i made the subject, "country in africa" was that i didnt
want to use the exact word
i can see my mistake it that now.
as always, i sincerely appreciate the vast programming and SA application
wisdom & knowledge on this list.
thank you all for you help.
and again,
At 08:18 31-01-2009, RobertH wrote:
and if i understand correctly, you can tell the SA config not to
bayes_ignore_from *...@spamassassin.apache.org
bayes_ignore_to users@spamassassin.apache.org
Right. There are still some subscribers who don't realize that some
of the messages from this mai
On Sat, 31 Jan 2009, SM wrote:
We then have to obfuscate the words so that we can mention them on this
mailing list.
If you're running SA mailing list messages through SA you get what you
deserve.
--
John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
jhar...@impsec.org
is this good enough for a basic rule to flag that word
or should it be different or raw or what?
something better?
body LOCAL_NIGERIA /\bnigeria\b/i
score LOCAL_NIGERIA 0.1
describe LOCAL_NIGERIA This is a simple test rule for nigeria
i know that single word rules in general are a bad
Hello,
Using: spamassassin 3.2.5 on a CentOS 5.2 system.
Unfortunately the spamd process on one of our mail servers crashed early
this morning. The system mail log showed:
==
Jan 31 06:52:00 tracy spamd[23255]: spamd: connection from
localh
On Freitag, 30. Januar 2009 06:33:49 Rajkumar S wrote:
> > After activating the rule I haven't seen any more FP. But that doesn't
> > mean much. Here are my stats from yesterday:
> >
> > Rank Hits% Msgs % Spam% Ham Score Rule
> > -- --- -
Matus UHLAR - fantomas wrote on Fri, 30 Jan 2009 16:41:51 +0100:
> Aren't there any MUAs that try to autodetect the right content type?
> Even from microsoft?
No. If they would then you couldn't send any plain text messages that
*discuss* HTML code with examples.
Kai
--
Kai Schätzl, Berlin, G
--On Saturday, January 31, 2009 10:31 PM +0100 Kai Schaetzl
wrote:
Aren't there any MUAs that try to autodetect the right content type?
Even from microsoft?
No. If they would then you couldn't send any plain text messages that
*discuss* HTML code with examples.
A simple-minded autodetect s
RobertH wrote:
it should get a hit.
how many legitimate emails a day do you people get with the work Nigeria in
it?
several now that we are sending the 'n word' back and forth on this list
now!
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporat
RobertH wrote:
>
>
> how many legitimate emails a day do you people get with the work Nigeria in
> it?
>
Daily, not really.
But often enough in email news feeds.
i.e. I got one within the last 24 hours.. Remember the rebels
threatening oil supplies in Nigeria 4 months ago? Yeah, they called
matt
i hear ya.
ill be using it and scoring low (or whatever i desire) and using meta's it
appears.
i wasnt asking for it to be some major contention in SA core scoring...
i just honestly cannot belive that there are still people out there sending
these emails pretending to be someone from that
On Thursday 29 January 2009 23:33:49 Rajkumar S wrote:
> 2009/1/30 Stefan Jakobs
>
> > After activating the rule I haven't seen any more FP. But that doesn't
> > mean much. Here are my stats from yesterday:
> >
> > Rank Hits% Msgs % Spam% Ham Score Rule
> > --
19 matches
Mail list logo
