Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread rich...@buzzhost.co.uk
On Wed, 2009-11-25 at 00:23 -0700, LuKreme wrote: > On 24-Nov-2009, at 15:23, Jeff Mincy wrote: > > From: LuKreme > >> On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas > > > >>> Yes, why to differ between non-abusing and abusing marketers... > > > >> We've been through this before. On m

Re: masscheck & Dumptext.pm line 26.

2009-11-24 Thread Yet Another Ninja
On 11/25/2009 3:56 AM, John Hardin wrote: On Tue, 24 Nov 2009, Justin Mason wrote: that's normal. can be ignored On Tue, Nov 24, 2009 at 21:04, Yet Another Ninja wrote: When running masscheck calling: /home/mc/masscheck/spamassassin/trunk/masses && nice ./mass-check \ --cf='loadplugin

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread LuKreme
On 24-Nov-2009, at 15:23, Jeff Mincy wrote: > From: LuKreme >> On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas > >>> Yes, why to differ between non-abusing and abusing marketers... > >> We've been through this before. On my mail, habeas is a very strong >> indicator of spam. It doe

Re: masscheck & Dumptext.pm line 26.

2009-11-24 Thread John Hardin
On Tue, 24 Nov 2009, Justin Mason wrote: that's normal. can be ignored On Tue, Nov 24, 2009 at 21:04, Yet Another Ninja wrote: When running masscheck calling: /home/mc/masscheck/spamassassin/trunk/masses && nice ./mass-check \ --cf='loadplugin Dumptext plugins/Dumptext.pm' \ --cf='loadpl

Re: Anybody notice flood of ED spam?

2009-11-24 Thread Alex
Hi, > I am seeing (past 4-5 days) more spam generally slipping under my scoring > settings, but > in particular ED image spam with the word 'viagra' spelled correctly in the > sender and/or > subject headers. I have settings for tagging and auto discard with a 15 point > spread, and I wouldn't

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread jdow
From: "Jeff Mincy" Sent: Tuesday, 2009/November/24 14:23 From: LuKreme Date: Mon, 23 Nov 2009 17:08:11 -0700 On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas wrote: > Yes, why to differ between non-abusing and abusing marketers... We've been through this before. On my mail, ha

Re: masscheck & Dumptext.pm line 26.

2009-11-24 Thread Justin Mason
that's normal. can be ignored On Tue, Nov 24, 2009 at 21:04, Yet Another Ninja wrote: > When running masscheck calling: > > /home/mc/masscheck/spamassassin/trunk/masses && nice ./mass-check \ > --cf='loadplugin Dumptext plugins/Dumptext.pm' \ > --cf='loadplugin Mail::SpamAssassin::Plugin::Che

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread Jeff Mincy
From: LuKreme Date: Mon, 23 Nov 2009 17:08:11 -0700 On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas wrote: > Yes, why to differ between non-abusing and abusing marketers... We've been through this before. On my mail, habeas is a very strong indicator of spam.

masscheck & Dumptext.pm line 26.

2009-11-24 Thread Yet Another Ninja
When running masscheck calling: /home/mc/masscheck/spamassassin/trunk/masses && nice ./mass-check \ --cf='loadplugin Dumptext plugins/Dumptext.pm' \ --cf='loadplugin Mail::SpamAssassin::Plugin::Check' \ -j=2 -n -o --rules='^(?!JM_SOUGHT)(?!T_JM_SOUGHT)' \ spam:dir:/home/mc/Maildir/.SPAM/c

Re: emailBL devel ?

2009-11-24 Thread Yet Another Ninja
On 11/24/2009 7:10 PM, Benny Pedersen wrote: On tir 24 nov 2009 19:02:29 CET, Yet Another Ninja wrote seems simpler than adding 1 domains to freemail's config .-) that why i like to change it to be paidmail.pm with lists of paid domains got it now ? :) spammers can get any free domai

Re: emailBL devel ?

2009-11-24 Thread Benny Pedersen
On tir 24 nov 2009 19:02:29 CET, Yet Another Ninja wrote seems simpler than adding 1 domains to freemail's config .-) that why i like to change it to be paidmail.pm with lists of paid domains got it now ? :) spammers can get any free domain and it can continue as a freemail, but whe

Re: emailBL devel ?

2009-11-24 Thread Yet Another Ninja
On 11/24/2009 6:34 PM, Benny Pedersen wrote: On tir 24 nov 2009 18:30:15 CET, Yet Another Ninja wrote Freemail.pm plugin does it pretty well without the overhead and cron'd replication lag... just one problem with freemail it should list all domain as freemail as default, unless there is a cl

Re: [sa] Re: Undisclosed recipients :; -- again

2009-11-24 Thread Charles Gregory
On Mon, 23 Nov 2009, John Hardin wrote: Granted, but in metas such a test can be useful: http://ruleqa.spamassassin.org/?rule=%2FTO_NO&srcpath=jhardin Every now and then, someone posts a link like this one, and I find myself looking at a kind of 'index' page that frankly doesn't mean a thing t

Re: emailBL devel ?

2009-11-24 Thread McDonald, Dan
On Tue, 2009-11-24 at 09:22 -0800, R-Elists wrote: > didnt anyone think that the emailBL project was good enough in adding an > extra factor of protection to continue development? I'm using it with a locally sourced set of "bad actors". Unfortunately, I don't believe I'm allow to share the data.

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread Alex
Hi, > Obviously every admin has to decide what to block and not > to block, but I just wanted to add a data point. I try > not to block stuff my users have signed up for, as inane > as the messages may be (to me). The trouble is, which users have actually subscribed and wish to receive free credi

Re: Anybody notice flood of ED spam?

2009-11-24 Thread Michael Scheidell
John Tice wrote: I am seeing (past 4-5 days) more spam generally slipping under my scoring settings, but in particular ED image spam with the word '' spelled correctly in the sender and/or subject headers. I have settings for tagging and auto discard with a 15 point spread, and this kind of

Anybody notice flood of ED spam?

2009-11-24 Thread John Tice
I am seeing (past 4-5 days) more spam generally slipping under my scoring settings, but in particular ED image spam with the word 'viagra' spelled correctly in the sender and/or subject headers. I have settings for tagging and auto discard with a 15 point spread, and this kind of stuff used to

Re: emailBL devel ?

2009-11-24 Thread Benny Pedersen
On tir 24 nov 2009 18:30:15 CET, Yet Another Ninja wrote Freemail.pm plugin does it pretty well without the overhead and cron'd replication lag... just one problem with freemail it should list all domain as freemail as default, unless there is a clear sign of payment to get it otherway aro

Re: emailBL devel ?

2009-11-24 Thread Benny Pedersen
On tir 24 nov 2009 18:22:25 CET, R-Elists wrote didnt anyone think that the emailBL project was good enough in adding an extra factor of protection to continue development? +1 even without more devel on it, what does miss ? so far i have just seen one big problem with it, dns servers / mirror

Re: emailBL devel ?

2009-11-24 Thread Yet Another Ninja
On 11/24/2009 6:22 PM, R-Elists wrote: didnt anyone think that the emailBL project was good enough in adding an extra factor of protection to continue development? - rh Freemail.pm plugin does it pretty well without the overhead and cron'd replication lag...

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread Matt Garretson
Matt Garretson wrote: > FWIW, a good number of those in your list I'm pretty sure > are legit opt-in "newsletters" (term used loosely... they > mainly consist of ads and "special offers"). Sure, the're Followup to myself: I have no opinion on the HABEAS issue, but a couple years ago I decided

emailBL devel ?

2009-11-24 Thread R-Elists
didnt anyone think that the emailBL project was good enough in adding an extra factor of protection to continue development? - rh

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread Matt Garretson
Daniel J McDonald wrote: > Although these don't all appear to be business related, very few would > be marked as spam without the HABEAS_ACCREDITED bonus. > First, the suspicious ones: > [snip] FWIW, a good number of those in your list I'm pretty sure are legit opt-in "newsletters" (term used lo

Re: rbl checks not running

2009-11-24 Thread Charles Gregory
On Mon, 23 Nov 2009, Mark Hedges wrote: OMG I am SO DUMB - I had skip_rbl_checks set in my personal userconf. DUH. (nod) Thanks for posting the full logs for both messages. Once the problem is properly defined, the solution is usually not too hard to find (though occasionally embarrassing *gri

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread LuKreme
On 24-Nov-2009, at 01:17, Hajdú Zoltán wrote: > forces them to provide unsubscription options in their advertising messages, > etc. If there wasnt any unsubscribe option Sorry, not good enough. The support SPAMMERS who sned messages to addresses that never subscribed, period. And the simple

Re: [SA] cleanup for DNSBLs

2009-11-24 Thread Bjoern Sikora
Hi folks, > >> Unless there are objections, I'm going to add two tests to my sandbox: > >> > >> RCVD_IN_NIX_SPAM, a new (to us) DNSBL populated by the same source as > >> the original [N]iXhash zone, with results on intra2net that look quite > >> promising: 72.98:0.12 spam:ham (PSBL has 48.69:0.3

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread rich...@buzzhost.co.uk
On Tue, 2009-11-24 at 09:17 +0100, Hajdú Zoltán wrote: > Habeas (nowdays ReturnPath) certifies their clients, forces them to provide > unsubscription options in their advertising messages, etc. If > there wasnt any unsubscribe option then contact their support/abuse team. > They list many import

Re: HABEAS_ACCREDITED SPAMMER

2009-11-24 Thread Hajdú Zoltán
Habeas (nowdays ReturnPath) certifies their clients, forces them to provide unsubscription options in their advertising messages, etc. If there wasnt any unsubscribe option then contact their support/abuse team. They list many important parties who sends transactional messages and so on, that you