RE: 0.001 rules - why?

2009-08-10 Thread Robert
> > > > > > > header FH_HELO_EQ_D_D_D_DX-Spam-Relays-Untrusted =~ /^[^\]]+ > > > ... > > > header HELO_MISC_IPX-Spam-Relays-Untrusted =~ /^[^\]]+ > > > > > Possibly this is down to their running on the wrong boundary, these > > should be on the internal network boundary. > >

Re: 0.001 rules - why?

2009-08-10 Thread Henrik K
On Tue, Aug 11, 2009 at 04:31:32AM +0100, RW wrote: > On Sun, 09 Aug 2009 11:33:29 +0100 > Cedric Knight wrote: > > > > header FH_HELO_EQ_D_D_D_DX-Spam-Relays-Untrusted =~ /^[^\]]+ > > ... > > header HELO_MISC_IPX-Spam-Relays-Untrusted =~ /^[^\]]+ > > > Possibly this is down to t

Re: RelayCountry Config

2009-08-10 Thread LuKreme
On 7-Aug-2009, at 11:20, Charles Gregory wrote: Okay, so now I'm curious. What *IS* that chunk of code? If you compile it and run it you will see that the putchar() prints out his email address. -- When the routine bites hard / and ambitions are low And the resentment rides high / but emoti

Re: Geographical distance

2009-08-10 Thread LuKreme
On 6-Aug-2009, at 11:28, Terry Carmen wrote: It actually works very well with very small and very large distances. I suppose it COULD. Anything that I receive from an IP address located with maybe 50 miles of my location is almost 100% guaranteed Ham. However, I've never received even a s

Re: 0.001 rules - why?

2009-08-10 Thread RW
On Sun, 09 Aug 2009 11:33:29 +0100 Cedric Knight wrote: > header FH_HELO_EQ_D_D_D_DX-Spam-Relays-Untrusted =~ /^[^\]]+ > ... > header HELO_MISC_IPX-Spam-Relays-Untrusted =~ /^[^\]]+ > Possibly this is down to their running on the wrong boundary, these should be on the internal ne

Re: Mailbox for auto learning

2009-08-10 Thread Luis Daniel Lucio Quiroz
Le lundi 10 août 2009 19:15:15, Cedric Knight a écrit : > Stefan wrote: > > Am Sonntag, 9. August 2009 07:36:54 schrieb Luis Daniel Lucio Quiroz: > >> Hi SAs, > >> > >> Well, after reading this link > >> http://spamassassin.apache.org/full/3.2.x/doc/sa-learn.html I'm still > >> looking for an easy-

Re: can Spamassassin count recipients?

2009-08-10 Thread LuKreme
On 5-Aug-2009, at 05:28, Steve Freegard wrote: header __COUNT_RCPTS ToCc =~ /(?:[^@,\...@[^@,\s]+)/ tflags __COUNT_RCPTS multiple meta RCPTS_5_10 (__COUNT_RCPTS >= 5 && __COUNT_RCPTS <= 10) meta RCPTS_5_10 (__COUNT_RCPTS >= 5) score RCPTS_5_10 1.0 describe RCPTS_5_10 Message has 5 to 10 re

Re: Mailbox for auto learning

2009-08-10 Thread Cedric Knight
Stefan wrote: > Am Sonntag, 9. August 2009 07:36:54 schrieb Luis Daniel Lucio Quiroz: >> Hi SAs, >> >> Well, after reading this link >> http://spamassassin.apache.org/full/3.2.x/doc/sa-learn.html I'm still >> looking for an easy-way to let my mortal users to train our antispam. I >> was thinking a

Re: 0.001 rules - why?

2009-08-10 Thread Cedric Knight
Matus UHLAR - fantomas wrote: > On 09.08.09 11:33, Cedric Knight wrote: >> I'm using Bayes and network tests, and have found a few rules with a >> good ratio of ham to spam, but that score only 0.001 in the default rules. > > apparently there's no use for them alone and the score isn't 0 just becau

Re: your mail

2009-08-10 Thread LuKreme
On 9-Aug-2009, at 03:36, Matus UHLAR - fantomas wrote: We allow authenticated relaying from our users even if they do not use our IP ranges and we see much less spam, Exactly. and it is much easier to block the authenticated user than finding out who exactly is sending mail from dynamically

Re: [sa] Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Rick Macdougall
Charles Gregory wrote: On Mon, 10 Aug 2009, Rick Macdougall wrote: I can't speak for others but at my main job (20K+ email accounts) it happens about once every 2 month's or so. Some how the spammer gets a hold of someone's password and either uses smtp-auth or webmail to send out spam. "So

Re: [sa] Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Charles Gregory
On Mon, 10 Aug 2009, Matus UHLAR - fantomas wrote: On 10.08.09 11:07, Charles Gregory wrote: IMNSHO You shouldn't. You should only allow *your* customers with pop e-mail accounts on *your* servers to send mail. 1. If more customers send spam from the same IP address without authentiaction, you

Re: [sa] Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Charles Gregory
On Mon, 10 Aug 2009, Rick Macdougall wrote: I can't speak for others but at my main job (20K+ email accounts) it happens about once every 2 month's or so. Some how the spammer gets a hold of someone's password and either uses smtp-auth or webmail to send out spam. "Somehow" is not that hard t

Re: your mail

2009-08-10 Thread Kris Deugau
Res wrote: On Wed, 29 Jul 2009, Matus UHLAR - fantomas wrote: Aha, so this is your point? You accept mail from your IP addresses, but not from your customers roaming elsewhere? Bad for you. It was already discussed here - you are going the wrong way. Not bad for me, we used to do this, it

SQL bayesian learning / AWL

2009-08-10 Thread alxgomz
Hello, I already sent this messages but didn't get any reply at the moment. So I'm sending it back hoping it could wake up some spamassassin guru. Please if the message is not understandable, or not posted in the right place... let me know I'll do what's needed. I am trying to setup spamass

Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Rick Macdougall
Matus UHLAR - fantomas wrote: On 10.08.09 11:24, Rick Macdougall wrote: I can't speak for others but at my main job (20K+ email accounts) it happens about once every 2 month's or so. Some how the spammer gets a hold of someone's password and either uses smtp-auth or webmail to send out spa

Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Matus UHLAR - fantomas
> Charles Gregory wrote: >> To be truthful, I have been doing this by default here, as well, but >> find that it creates some problems for some users. So I am thinking >> about opening up SMTP-AUTH ports. Trouble is (and its semi-relevance to >> this list) I have to wonder if I am opening myse

Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Matus UHLAR - fantomas
> On Sun, 9 Aug 2009, Res wrote: >> if I'm in charge of the network for say this countries 5th largest >> ISP, why SHOULD I allow customers of say our countries largest, or 25th >> largest relay their mail via my systems... On 10.08.09 11:07, Charles Gregory wrote: > IMNSHO You shouldn't. Y

Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Rick Macdougall
Charles Gregory wrote: On Sun, 9 Aug 2009, Res wrote: To be truthful, I have been doing this by default here, as well, but find that it creates some problems for some users. So I am thinking about opening up SMTP-AUTH ports. Trouble is (and its semi-relevance to this list) I have to wonder if

Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Charles Gregory
On Sun, 9 Aug 2009, Res wrote: if I'm in charge of the network for say this countries 5th largest ISP, why SHOULD I allow customers of say our countries largest, or 25th largest relay their mail via my systems... IMNSHO You shouldn't. You should only allow *your* customers with pop e-mai

Re: Mailbox for auto learning

2009-08-10 Thread Jari Fredriksson
> Stefan wrote: > This may not be ideal, but in Thunderbird, you can drag > messages between mailboxes. You could setup each user to > have access to their own account and the two learning > mailboxes. You can then have your users drag the false > positives/negatives to the appropriate box. I have

Re: Mailbox for auto learning

2009-08-10 Thread Dan Schaefer
Stefan wrote: Am Sonntag, 9. August 2009 07:36:54 schrieb Luis Daniel Lucio Quiroz: Hi SAs, Well, after reading this link http://spamassassin.apache.org/full/3.2.x/doc/sa-learn.html I'm still looking for an easy-way to let my mortal users to train our antispam. I was thinking a mailbox such

Re: Mailbox for auto learning

2009-08-10 Thread Stefan
Am Sonntag, 9. August 2009 07:36:54 schrieb Luis Daniel Lucio Quiroz: > Hi SAs, > > Well, after reading this link > http://spamassassin.apache.org/full/3.2.x/doc/sa-learn.html I'm still > looking for an easy-way to let my mortal users to train our antispam. I > was thinking a mailbox such as h...