Re: 3.3.0 alpha 2 on production mail servers / clusers ???

2009-08-29 Thread MySQL Student
Hi, > On Saturday August 29 2009 19:47:32 R-Elists wrote: >> have many, or any of you folks on the list migrated your production servers >> to the 3.3.0 alpha 2 or later release? > > We are certainly one of them (actually running CVS head, > which is pretty close to alpha2). About 1000 users here.

Re: Porn-portal spammers

2009-08-29 Thread MySQL Student
Hi, > I am getting rather tired from messages spamming porn-portals. They typically > originate from hotmail.com, and advertise a porn-portal based on > google.com/groups, google.com/reader, groups.yahoo.com, pipes.yahoo.com, > spaces.live.com, docs.google.com, sites.google.com and livejournal.com

Re: 3.3.0 alpha 2 on production mail servers / clusers ???

2009-08-29 Thread Mark Martinec
On Saturday August 29 2009 19:47:32 R-Elists wrote: > have many, or any of you folks on the list migrated your production servers > to the 3.3.0 alpha 2 or later release? We are certainly one of them (actually running CVS head, which is pretty close to alpha2). About 1000 users here. Mark

Re: Writing an article to help users avoid black lists

2009-08-29 Thread Ted Mittelstaedt
Marc Perkel wrote: Trying to write a how-to type article about setting up email servers correctly with an eye on avoiding getting blocked by spam filters. Here's what I have so far. http://wiki.junkemailfilter.com/index.php/Keeping_Your_Server_Off_Black_Lists Looking for more ideas and sug

Re: Porn-portal spammers

2009-08-29 Thread Mynabbler
Karsten Bräckelmann-2 wrote: > > Yes, it is indeed likely prone to FPs on its own, unless very strictly > meta'ed for some special cases, and it actually also is likely bound to > expire soon. Obfuscation techniques like this usually are subject to > change, quite rapidly, and I'd bet you'll soo

Re: Porn-portal spammers

2009-08-29 Thread Karsten Bräckelmann
On Sat, 2009-08-29 at 10:15 -0700, an anonymous Nabble user wrote: > Karsten Bräckelmann wrote: > > tflags __COMMA multiple > > meta __COMMA_4 __COMMA >= 4 > > Works wonders. I chose three, and was almost inclined to score on just this > rule, if it wasn't for people discussing Dave Dee, Dozy, B

Re: Porn-portal spammers

2009-08-29 Thread John Hardin
On Sat, 29 Aug 2009, Mynabbler wrote: Karsten Bräckelmann-2 wrote: header __COMMA Subject =~ /,/ tflags __COMMA multiple meta __COMMA_4 __COMMA >= 4 Works wonders. I chose three, and was almost inclined to score on just this rule, if it wasn't for people discussing Dave Dee, Dozy, Beaky,

Re: Porn-portal spammers

2009-08-29 Thread John Hardin
On Sat, 29 Aug 2009, Karsten Br?ckelmann wrote: On Sat, 2009-08-29 at 06:41 -0700, an anonymous Nabble user wrote: The combo 'Portal link found' and subject could still be used, provided I have a rule that is able to count the number of comma's in a subject. Is there a way to do such a thing?

3.3.0 alpha 2 on production mail servers / clusers ???

2009-08-29 Thread R-Elists
have many, or any of you folks on the list migrated your production servers to the 3.3.0 alpha 2 or later release? - rh

Re: Porn-portal spammers

2009-08-29 Thread RW
On Sat, 29 Aug 2009 10:15:56 -0700 (PDT) Mynabbler wrote: > > > Karsten Bräckelmann-2 wrote: > > > > header __COMMA Subject =~ /,/ > > tflags __COMMA multiple > > meta __COMMA_4 __COMMA >= 4 > > > > Works wonders. I chose three, and was almost inclined to score on > just this rule, if it

Re: sa-update port

2009-08-29 Thread RW
On Sat, 29 Aug 2009 18:51:23 +0200 Karsten Bräckelmann wrote: > On Sat, 2009-08-29 at 11:11 -0500, Luis Daniel Lucio Quiroz wrote: > > Hi all, I was wondering if youcand telme what tcp port sa-update > > use. My fwadmin will close free gateway > > DNS port 53, UDP and TCP. HTTP port 80, TCP.

Re: Porn-portal spammers

2009-08-29 Thread Mynabbler
Karsten Bräckelmann-2 wrote: > > header __COMMA Subject =~ /,/ > tflags __COMMA multiple > meta __COMMA_4 __COMMA >= 4 > Works wonders. I chose three, and was almost inclined to score on just this rule, if it wasn't for people discussing Dave Dee, Dozy, Beaky, Mick & Tich :) It scores howev

Re: Flag Image SPAM

2009-08-29 Thread John Hardin
On Sat, 29 Aug 2009, --[ UxBoD ]-- wrote: Cannot recall seeing a follow up to John H new rules; Are they available now or still under test review ? As of this morning they are doing well enough in nightly masscheck to be included in autopublication (for 3.3.0 only, sadly). They should work ju

Re: sa-update port

2009-08-29 Thread Karsten Bräckelmann
On Sat, 2009-08-29 at 11:11 -0500, Luis Daniel Lucio Quiroz wrote: > Hi all, I was wondering if youcand telme what tcp port sa-update use. My > fwadmin will close free gateway DNS port 53, UDP and TCP. HTTP port 80, TCP. -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\

Probleme with testing (?)

2009-08-29 Thread Guillaume Gelle
Hi there, I'm new here, first message, which I won't messed up, please tell me if I am! :) Ok, I -think- I have a problem with my configuration of spamassassin. I have a lot of messages passing through as "not spam" even if it's obvious spam. The thing is I think somewhere, SA if skipping t

sa-update port

2009-08-29 Thread Luis Daniel Lucio Quiroz
Hi all, I was wondering if youcand telme what tcp port sa-update use. My fwadmin will close free gateway Regards, LD

Re: Porn-portal spammers

2009-08-29 Thread Karsten Bräckelmann
On Sat, 2009-08-29 at 06:41 -0700, an anonymous Nabble user wrote: > The combo 'Portal link found' and subject could still be used, provided I > have a rule that is able to count the number of comma's in a subject. Is > there a way to do such a thing? header __COMMA Subject =~ /,/ tflags __COMMA

Re: Porn-portal spammers

2009-08-29 Thread Benny Pedersen
On Sat 29 Aug 2009 03:41:00 PM CEST, Mynabbler wrote http://pastebin.com/m5c18ffdd The combo 'Portal link found' and subject could still be used, provided I have a rule that is able to count the number of comma's in a subject. Is there a way to do such a thing? http://rfc-ignorant.org/tools/l

Porn-portal spammers

2009-08-29 Thread Mynabbler
I am getting rather tired from messages spamming porn-portals. They typically originate from hotmail.com, and advertise a porn-portal based on google.com/groups, google.com/reader, groups.yahoo.com, pipes.yahoo.com, spaces.live.com, docs.google.com, sites.google.com and livejournal.com. Up until

Flag Image SPAM

2009-08-29 Thread --[ UxBoD ]--
Hi, Cannot recall seeing a follow up to John H new rules; Are they available now or still under test review ? Best Regards, -- This message has been scanned for viruses and dangerous content and is believed to be clean. SplatNIX IT Services :: Innovation through collaboration