Interesting low scoring phish

2009-12-07 Thread rich...@buzzhost.co.uk
http://pastebin.com/m7c1c17d Interesting insofar as it appears to be whitelisted??? Is this some kind of well known US email or hosting service? Sane missed it, the dnsbl's have missed it and the content filtering has missed it. So it's a tasty morsel of spam :-)

Re: Interesting low scoring phish

2009-12-07 Thread Yet Another Ninja
On 12/7/2009 3:42 PM, rich...@buzzhost.co.uk wrote: http://pastebin.com/m7c1c17d Interesting insofar as it appears to be whitelisted??? Is this some kind of well known US email or hosting service? Sane missed it, the dnsbl's have missed it and the content filtering has missed it. So it's a

Re: Interesting low scoring phish

2009-12-07 Thread rich...@buzzhost.co.uk
On Mon, 2009-12-07 at 16:00 +0100, Yet Another Ninja wrote: On 12/7/2009 3:42 PM, rich...@buzzhost.co.uk wrote: http://pastebin.com/m7c1c17d Interesting insofar as it appears to be whitelisted??? Is this some kind of well known US email or hosting service? Sane missed it, the

Re: Suggestion for use by ANY whitelist service....

2009-12-07 Thread Charles Gregory
On Fri, 4 Dec 2009, Ted Mittelstaedt wrote: What are you asking? Obviously 'unsolicited' is NOT 'wanted', so therefore by using the word 'wanted' I am by definition meaning *solicited*. That means somone ASKED for the mail. REQUESTED it via an opt-in mechanism, with confirmation. I will

Re: HABEAS_ACCREDITED WHY BY DEFAULT?

2009-12-07 Thread Charles Gregory
On Sat, 5 Dec 2009, Per Jessen wrote: Won't customers dealing with such a company will have whitelisted them long ago? For every 'mark' that is out there, stupidly entering their e-mail and then getting a bunch of ads for which they didn't realize they had given permission, there are people

Re: Language detection in TextCat

2009-12-07 Thread Marc Perkel
Matt Kettler wrote: Marc Perkel wrote: I'm wondering if the language detection in TextCat can be improved. Here's the situation. It appears that TextCat was designed to be inclusive. You list the languages you want and it returns many possibilities so as not to trigger unwanted

New image spams

2009-12-07 Thread Chris Owen
Well I'm not sure about new but the image spam seems to be back on again after a long absence: http://pastebin.com/d6d840f09 Same issues/filtering techniques as before. These do seem to be doing a pretty good job of clobbering Bayes filtering though. Chris

Re: HABEAS_ACCREDITED WHY BY DEFAULT?

2009-12-07 Thread LuKreme
On 7-Dec-2009, at 09:03, Charles Gregory wrote: There's a need. A real genuine need for services like Habeas. But they need to be *very* well managed and policed. And it seems, from some complaints, that this is not happening How a service like HABEAS needs to work is that 1) It keeps a

Re: freemail vs dkim / spf

2009-12-07 Thread Charles Gregory
On Sun, 6 Dec 2009, Benny Pedersen wrote: i think it could be added to freemail.pm to test if sender domain have spf or dkim and if no spf and or no dkim consider it as a freemail domain ? Nope. I run an ISP and basically my SPF amounts to 'neutral' because my users can send mail from any

Re: Language detection in TextCat

2009-12-07 Thread LuKreme
On 7-Dec-2009, at 09:55, Marc Perkel wrote: Any chance someone might be interested in a radical redesign? I think language exclusion would be an extremely effective spam deterrent as email in a language you don't speak is definitely spam. Erm… not necessarily. As a general rule, this might

Re: Suggestion for use by ANY whitelist service....

2009-12-07 Thread Charles Gregory
On Sat, 5 Dec 2009, R-Elists wrote: Nyet, nyet, nyet... we would *not* all live with the occassional opt-in request from Return Path. frankly, nothing against them, yet if an organization really needs Return Path to get their email through to mailboxes without rejection, then doesn't the

Re: New image spams

2009-12-07 Thread Alex
Hi, Well I'm not sure about new but the image spam seems to be back on again after a long absence: http://pastebin.com/d6d840f09 Yes, a few here too. Can you explain your rules? I haven't seen some of these before: X-Spam-Status: No, score=5.0 required=6.0 tests=BAYES_50,

Re: Suggestion for use by ANY whitelist service....

2009-12-07 Thread Charles Gregory
On Sun, 6 Dec 2009, rich...@buzzhost.co.uk wrote: A truly clean company that always uses opt-in and never spams has nothing to fear from any anti-spam measure. Nonsense. I had to score this list -2000 just to keep it from scoring so darn high that it was hitting the 'automatic' rejection at

Re: HABEAS_ACCREDITED WHY BY DEFAULT?

2009-12-07 Thread jdow
What I call spam you may call ham. What I call ham you might call spam. One ring to control them all er one list to filter them all inherently cannot work, especially when people change their minds and decide to unsubscribe with extreme prejudice. {^_^} - Original Message - From:

Re: New image spams

2009-12-07 Thread Chris Owen
On Dec 7, 2009, at 11:37 AM, Alex wrote: Yes, a few here too. Can you explain your rules? Nothing magical but I'll send you a response offlist. Why is your score 6.0? Not my score. It is a customer's score. They can set them at anything they want (well anything 3 and above). Chris

RE: Suggestion for use by ANY whitelist service....

2009-12-07 Thread R-Elists
Nonsense. I had to score this list -2000 just to keep it from scoring so darn high that it was hitting the 'automatic' rejection at the SMTP gate before any of my whitelists could function. Sometimes legit mail scores high. A 'truly clean company' should be permitted to enjoy a

RE: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available

2009-12-07 Thread R-Elists
in the post there was mention of - added or updated many rules; incomplete list in no particular order: vbounce, lotsa_money, muchmoney, image spam, fill_this_form, FreeMail...snipped Q1)is there a location that shows the complete list at this time? if not, Q2) will there be a complete

Re: Is there a list of all white lists being used by default rules?

2009-12-07 Thread Robert Lopez
Thank you. -- Robert Lopez Unix Systems Administrator Central New Mexico Community College (CNM) 525 Buena Vista SE Albuquerque, New Mexico 87106

Re: Language detection in TextCat

2009-12-07 Thread Martin Gregorie
On Mon, 2009-12-07 at 08:55 -0800, Marc Perkel wrote: Except for very short messages I would think that if you spell checked the message in several languages and found that 80% was spelled correctly that you have a match. You wouldn't have to check every language, just start with some common

Re: HABEAS_ACCREDITED WHY BY DEFAULT?

2009-12-07 Thread Per Jessen
Charles Gregory wrote: There's a need. A real genuine need for services like Habeas. It almost certainly depends on your environment - like my numbers showed, over four months, I only had 45 emails that would have gone down the drain without Habeas. In comparison to what was processed that

Re: +++Spam+++: RE: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available

2009-12-07 Thread McDonald, Dan
On Dec 7, 2009, at 12:12 PM, R-Elists list...@abbacomm.net wrote: in the post there was mention of - added or updated many rules; incomplete list in no particular order: vbounce, lotsa_money, muchmoney, image spam, fill_this_form, FreeMail...snipped Q1)is there a location that shows the

Re: Language detection in TextCat

2009-12-07 Thread Matus UHLAR - fantomas
Please, could you configure your MUA to quote, instead of colouring? HTML mail sucks. On 07.12.09 08:55, Marc Perkel wrote: Any chance someone might be interested in a radical redesign? I think language exclusion would be an extremely effective spam deterrent as email in a language

Re: Language detection in TextCat

2009-12-07 Thread Marc Perkel
Martin Gregorie wrote: On Mon, 2009-12-07 at 08:55 -0800, Marc Perkel wrote: Except for very short messages I would think that if you spell checked the message in several languages and found that 80% was spelled correctly that you have a match. You wouldn't have to check every

Re: HABEAS_ACCREDITED WHY BY DEFAULT?

2009-12-07 Thread Matus UHLAR - fantomas
On Sat, 5 Dec 2009, Per Jessen wrote: Won't customers dealing with such a company will have whitelisted them long ago? For every 'mark' that is out there, stupidly entering their e-mail and then getting a bunch of ads for which they didn't realize they had given permission, there are

Re: freemail vs dkim / spf

2009-12-07 Thread Matus UHLAR - fantomas
On Sun, 6 Dec 2009, Benny Pedersen wrote: i think it could be added to freemail.pm to test if sender domain have spf or dkim and if no spf and or no dkim consider it as a freemail domain ? On 07.12.09 12:23, Charles Gregory wrote: Nope. I run an ISP and basically my SPF amounts to

Re: freemail vs dkim / spf

2009-12-07 Thread Marc Perkel
Matus UHLAR - fantomas wrote: On Sun, 6 Dec 2009, Benny Pedersen wrote: i think it could be added to freemail.pm to test if sender domain have spf or dkim and if no spf and or no dkim consider it as a freemail domain ? On 07.12.09 12:23, Charles

Re: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available

2009-12-07 Thread Alex
Hi, - added or updated many rules; incomplete list in no particular order:  vbounce, lotsa_money, muchmoney, image spam, fill_this_form, FreeMail...snipped Q1)is there a location that shows the complete list at this time? I also have questions similar to these about the pending release.

Re: Suggestion for use by ANY whitelist service....

2009-12-07 Thread Ted Mittelstaedt
Charles Gregory wrote: On Fri, 4 Dec 2009, Ted Mittelstaedt wrote: What are you asking? Obviously 'unsolicited' is NOT 'wanted', so therefore by using the word 'wanted' I am by definition meaning *solicited*. That means somone ASKED for the mail. REQUESTED it via an opt-in mechanism, with

RE: Language detection in TextCat

2009-12-07 Thread R-Elists
This should be fairly easy to do: configure SA with the language(s) you will accept and the ratio of misspellings to total words that you'll accept as meaning 'unwanted language' after numbers and HTML tags have been excluded from the check. Apply the test to the whole body of a

RE: freemail vs dkim / spf

2009-12-07 Thread R-Elists
perkel wrote: I have yet to find ANY use for SPF. And SPF causes nothing but problems. Marc, why nothing but problems? is a lot of your system mail forward orientated? care to elaborate w/o going into the same old SPF diatribe? maybe there is something useful you havent had the aha

Re: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available

2009-12-07 Thread Mark Martinec
On Monday 07 December 2009 20:18:29 Alex wrote: - added or updated many rules; incomplete list in no particular order: vbounce, lotsa_money, muchmoney, image spam, fill_this_form, FreeMail...snipped Q1)is there a location that shows the complete list at this time? I doubt anyone will

Re: freemail vs dkim / spf

2009-12-07 Thread Marc Perkel
R-Elists wrote: perkel wrote: I have yet to find ANY use for SPF. And SPF causes nothing but problems. Marc, why nothing but problems? is a lot of your system "mail forward" orientated? care to elaboratew/o going into thesame old SPF diatribe? maybe

Re: freemail vs dkim / spf

2009-12-07 Thread Mike Cardwell
On 07/12/2009 19:13, Marc Perkel wrote: I have yet to find ANY use for SPF. And SPF causes nothing but problems. You can't have been looking very hard then. I whitelist mail from this list and spam-l with these simple SPF rules in my user_prefs: whitelist_from_spf *...@*.apache.org

RE: ANNOUNCE: Apache SpamAssassin 3.3.0-beta1 available

2009-12-07 Thread R-Elists
i spose we are concerned about renames of rules although there are pry not many of those... the main concern would be duplicate rule(s) functionality based upon the long lifespan of 3.2.5 and ummm sharing on the list and otherwise... could be same function with different name etc all will come

Trouble finding info on Spam issues

2009-12-07 Thread JaredDetroit
Hi, I don't know if I'm posting the right type of content here but I'm sure I'll find out. I'm trying to create a newsletter and I keep receiving the following spam assassin scores: I'm sending out a basic HTML newsletter with a pdf attachment to subscribers in Aweber. I've searched

Holding yahoo!'s feet to the fire

2009-12-07 Thread Philip A. Prindeville
Some good news... possibly. I finally complained to ARIN (for the 4th time) that the contact information for the Inktomi address blocks was incorrect, as Inktomi hasn't existed as a corporate (and legal) entity for some time... it was acquired by Yahoo! 3 years ago, and their address blocks

Re: Trouble finding info on Spam issues

2009-12-07 Thread John Hardin
On Mon, 7 Dec 2009, JaredDetroit wrote: I really appreciate any help. We'd be most able (and willing) to help if we had an actual example message to look at. If you can post a complete scored message, including _all_ headers, to a website like pastebin or to a website you control, and send

Re: Trouble finding info on Spam issues

2009-12-07 Thread Mike Cardwell
On 07/12/2009 22:16, JaredDetroit wrote: Hi, I don't know if I'm posting the right type of content here but I'm sure I'll find out. I'm trying to create a newsletter and I keep receiving the following spam assassin scores: I'm sending out a basic HTML newsletter with a pdf attachment to

Possible to whitelist *all* incoming emails that contain specific text in the subject line?

2009-12-07 Thread nathang
Hi, I'd like to setup an email account in cPanel so that I receive *all* incoming emails that contain a specific word in the subject line. It would be critical that I get 100% of the emails sent to me (that contain a specific word in the subject line), and that none of them get trapped by a