RE: A SpamAssassin Crash Course for Admins

2011-12-02 Thread Support SpamAssassin
Hi there, There isn't really much documentation for any Windows related topics since Michael Bell's tutorial site is offline as well as SpamAssassin for Win32 project being discontinued. However, while compiling an own version of native (so not Cygwin based) Windows SpamAssassin, I've written

matching headers/body of rfc822 attachment

2011-12-02 Thread Matus UHLAR - fantomas
Hello, I have made a few rules to match bodies of e-mail forwarded to our abuse account. they should match if IP from our range appears in the abuse report: body __GTSSK_IP04 /\b213\.215\.(6[4-9]|[7-9][0-9]|1[01][0-9]|12[0-7])\.\d/ should match any IP from range 213.215.64.0/18 However: I

Re: how to check the size of the subject?

2011-12-02 Thread Per Jessen
John Hardin wrote: On Thu, 1 Dec 2011, Sergio wrote: I want to check for specific subject size, thanks. Let's keep the discussion on-list so others may benefit. Larger than: header __SUBJ_GT_100 Subject =~ /.{101}/ Smaller than or equal to: header __SUBJ_LE_100 Subject =~

RFC 5966 and rbldnsd

2011-12-02 Thread Benny Pedersen
http://tools.ietf.org/html/rfc5966 if rbldnsd does only UDP will not give problems for bind local cache, or isp remote dns servers in forwards ? hope rbldns hosters dont sleep here 2 ways of workaround is: 1: use rbldnsd to dump zone to bind.zone (Gigaram usage) 2: let bind use forwards

Re: RFC 5966 and rbldnsd

2011-12-02 Thread Matus UHLAR - fantomas
On 02.12.11 15:52, Benny Pedersen wrote: if rbldnsd does only UDP will not give problems for bind local cache, or isp remote dns servers in forwards ? I don't think so. hope rbldns hosters dont sleep here 2 ways of workaround is: work around what? 1: use rbldnsd to dump zone to

Re: matching headers/body of rfc822 attachment

2011-12-02 Thread Kris Deugau
Matus UHLAR - fantomas wrote: Hello, I have made a few rules to match bodies of e-mail forwarded to our abuse account. they should match if IP from our range appears in the abuse report: body __GTSSK_IP04 /\b213\.215\.(6[4-9]|[7-9][0-9]|1[01][0-9]|12[0-7])\.\d/ should match any IP from range

Re: RFC 5966 and rbldnsd

2011-12-02 Thread Matthias Leisi
On Fri, Dec 2, 2011 at 4:02 PM, Matus UHLAR - fantomas uh...@fantomas.skwrote: 1: use rbldnsd to dump zone to bind.zone (Gigaram usage) I doubt rbldns is able to dump zone content. many DNSBL providers support also BIND format. Note that BIND takes much more RAM space man rbldnsd: | -d