Re: Return-Path:

2013-05-01 Thread Axb
On 05/02/2013 08:22 AM, Frank Bonnet wrote: hello I'm spammed with numerous google account that are forging header the first line begin allways with the following ( replace www with various characters ) Return-Path: Please could you help to instruct spamassassin to drop this ? Thanks a lot !

Return-Path:

2013-05-01 Thread Frank Bonnet
hello I'm spammed with numerous google account that are forging header the first line begin allways with the following ( replace www with various characters ) Return-Path: Please could you help to instruct spamassassin to drop this ? Thanks a lot !

RE: Bayes Autolearning

2013-05-01 Thread Andrew Talbot
Hey there, thanks for responding. That's an interesting point. Are you saying I should not use autolearning at all? I don't have any way to review a large corpus of messages because we don't have access to them - after they run through our servers they are sent on, and the text of the message is

Re: Bayes Autolearning

2013-05-01 Thread RW
On Wed, 01 May 2013 22:02:43 +0100 Steve Freegard wrote: > On 01/05/13 19:40, Andrew Talbot wrote: > > Hi, Seve - > > > > Thanks for your response. Is that just for performance reasons? > > > > Performance is one of the things that bayes_auto_learn_on_error 1 > will give you. It means that if th

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Axb
On 05/01/2013 03:15 PM, Axb wrote: On 05/01/2013 03:02 PM, Kevin A. McGrail wrote: On 5/1/2013 8:17 AM, Axb wrote: On 05/01/2013 01:24 PM, doneshlaher wrote: Hello All, I am Donesh Laher and I work as a Cyber Security Analyst in the Abuse Team at .PW Registry. We are aware of the recent spam

Re: Bayes Autolearning

2013-05-01 Thread Steve Freegard
On 01/05/13 19:40, Andrew Talbot wrote: Hi, Seve - Thanks for your response. Is that just for performance reasons? Performance is one of the things that bayes_auto_learn_on_error 1 will give you. It means that if the message was already considered spam by Bayes, then the message won't be a

Re: Testing Valid Recipients for outbound spam filtering

2013-05-01 Thread Marc Perkel
On 5/1/2013 12:12 AM, Robert Schetterer wrote: Am 01.05.2013 08:17, schrieb Marc Perkel: Looking for tricks. I'm working on improving outbound spam filtering and I'm using Exim and testing for valid recipients doing forward recipient callouts, which I would like to reduce. I'm wondering if th

RE: Bayes Autolearning

2013-05-01 Thread Andrew Talbot
Hi, Seve - Thanks for your response. Is that just for performance reasons? > -Original Message- > From: Steve Freegard [mailto:steve.freeg...@fsl.com] > Sent: Wednesday, May 01, 2013 2:24 PM > To: users@spamassassin.apache.org > Subject: Re: Bayes Autolearning > > All good advice ther

RE: .pw / Palau URL domains in spam

2013-05-01 Thread hospice admin
> Date: Wed, 1 May 2013 16:34:48 +0200 > From: axb.li...@gmail.com > To: users@spamassassin.apache.org > Subject: Re: .pw / Palau URL domains in spam > > On 05/01/2013 04:28 PM, hospice admin wrote: > > I don't care what some folks are saying about .pw, compared to Nominet they > > totally rock

RE: Bayes Autolearning

2013-05-01 Thread Andrew Talbot
Thank you for that! Off-list you mentioned that you don't need to set the cron/expire because of Redis features; why is it commented out here? > -Original Message- > From: Axb [mailto:axb.li...@gmail.com] > Sent: Wednesday, May 01, 2013 2:14 PM > To: users@spamassassin.apache.org > S

Re: Bayes Autolearning

2013-05-01 Thread Steve Freegard
All good advice there from Axb; the only thing I'd add to that is: bayes_auto_learn_on_error 1 Which prevents Bayes from over-training when the classifier already agrees with what the autolearn is trying to train on. Cheers, Steve. On 01/05/13 19:14, Axb wrote: On 05/01/2013 08:01 PM, Andre

Re: Bayes Autolearning

2013-05-01 Thread Axb
On 05/01/2013 08:01 PM, Andrew Talbot wrote: Any suggestions any of you have for a Bayes newbie - about what I just asked or otherwise - would be very much appreciated. I advocate autolearning as it has always worked fine for me. Can take a bit longer to see good results but with some tuning

Bayes Autolearning

2013-05-01 Thread Andrew Talbot
Hey All - I'm about to set up Bayes on one of our mail servers. A lot of the documentation says that I need to manually sift through a few hundred messages and classify them to 'teach' the filter, and it sounds like I may need to do that on an ongoing basis. That is not a very plausible so

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Axb
On 05/01/2013 05:25 PM, John Levine wrote: Nominet is a registrar No, Nominet is THE .co.uk registry R's, John thanks for the correction. Still - fixing after abuse is putting us back 10 years.

Re: .pw / Palau URL domains in spam

2013-05-01 Thread John Levine
> Kindly report all the complaints at abuse.al...@registry.pw and CC to > abuse.al...@directi.com. Hmmn. Is there some reason you don't take abuse reports at ab...@registry.pw and at cont...@registry.pw, which is the only address on the web site? Remember, everyone who sends you an abuse repor

Re: .pw / Palau URL domains in spam

2013-05-01 Thread John Levine
>Nominet is a registrar No, Nominet is THE .co.uk registry R's, John >Directi is acting as THE .pw registry

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Axb
On 05/01/2013 04:28 PM, hospice admin wrote: I don't care what some folks are saying about .pw, compared to Nominet they totally rock. When was the last time anyone saw Nominet suspend a .UK spammer? Judy You miss the point. Nominet is a registrar Directi is acting as THE .pw registry Registr

RE: .pw / Palau URL domains in spam

2013-05-01 Thread hospice admin
I don't care what some folks are saying about .pw, compared to Nominet they totally rock. When was the last time anyone saw Nominet suspend a .UK spammer? Judy > Date: Wed, 1 May 2013 06:58:41 -0700 > From: dones...@directi.com > To: users@spamassassin.apache.org > Subject: Re: .pw / Palau URL do

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Kevin A. McGrail
On 5/1/2013 9:58 AM, doneshlaher wrote: Dear Kevin A. McGrail, Thank you very much for reporting the domain names. We have suspended all the reported 13 domain names. And that's good to hear and I applaud you for reaching out to the mailing list about this issue. And as a consumer, I like che

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Axb
On 05/01/2013 04:06 PM, doneshlaher wrote: Hello Axb, Thank you for providing with the domain names. We will be suspending all these reported domain names. However, in the mean time may i know what kind of spams have been received ?? snowshoe / pillz / you name it also can you please forwar

Re: .pw / Palau URL domains in spam

2013-05-01 Thread doneshlaher
Hello Axb, Thank you for providing with the domain names. We will be suspending all these reported domain names. However, in the mean time may i know what kind of spams have been received ?? also can you please forward us the email headers of few of the reported domain names. This would help u

Re: .pw / Palau URL domains in spam

2013-05-01 Thread doneshlaher
Dear Kevin A. McGrail, Thank you very much for reporting the domain names. We have suspended all the reported 13 domain names. Regards Donesh Laher Cyber Security Analyst .PW Registry -- View this message in context: http://spamassassin.1065346.n5.nabble.com/pw-Palau-URL-domains-in-spam-tp10

Re: .pw / Palau URL domains in spam

2013-05-01 Thread doneshlaher
Hello Axb, The whois information can be fetched from multiple public whois websites. Below are the whois websites from where whois can be fetched. www.registry.pw/whois www.drwhois.com www.who.is www.port43.com and many more. However, if any particular whois website is not fetching the whois inf

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Axb
On 05/01/2013 03:11 PM, Kevin A. McGrail wrote: I recommend not blaming them for having a low priced product that spammers are abusing. Seems to me a bit like blaming the victim. To me, it sounds like they are trying to get a handle on the outbreak and better than many other registrars out th

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Axb
On 05/01/2013 03:02 PM, Kevin A. McGrail wrote: On 5/1/2013 8:17 AM, Axb wrote: On 05/01/2013 01:24 PM, doneshlaher wrote: Hello All, I am Donesh Laher and I work as a Cyber Security Analyst in the Abuse Team at .PW Registry. We are aware of the recent spam outbreak from the .PW domain names

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Kevin A. McGrail
On 5/1/2013 7:41 AM, Axb wrote: On 05/01/2013 01:24 PM, doneshlaher wrote: Hello All, I am Donesh Laher and I work as a Cyber Security Analyst in the Abuse Team at .PW Registry. We are aware of the recent spam outbreak from the .PW domain names and have already started taking actions agains

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Kevin A. McGrail
On 5/1/2013 8:17 AM, Axb wrote: On 05/01/2013 01:24 PM, doneshlaher wrote: Hello All, I am Donesh Laher and I work as a Cyber Security Analyst in the Abuse Team at .PW Registry. We are aware of the recent spam outbreak from the .PW domain names and have already started taking actions agains

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Axb
On 05/01/2013 01:24 PM, doneshlaher wrote: Hello All, I am Donesh Laher and I work as a Cyber Security Analyst in the Abuse Team at .PW Registry. We are aware of the recent spam outbreak from the .PW domain names and have already started taking actions against the abusive domain names that have

Re: .pw / Palau URL domains in spam

2013-05-01 Thread Axb
On 05/01/2013 01:24 PM, doneshlaher wrote: Hello All, I am Donesh Laher and I work as a Cyber Security Analyst in the Abuse Team at .PW Registry. We are aware of the recent spam outbreak from the .PW domain names and have already started taking actions against the abusive domain names that have

Re: .pw / Palau URL domains in spam

2013-05-01 Thread doneshlaher
Hello All, I am Donesh Laher and I work as a Cyber Security Analyst in the Abuse Team at .PW Registry. We are aware of the recent spam outbreak from the .PW domain names and have already started taking actions against the abusive domain names that have been reported to us. We request you all to

Re: Testing Valid Recipients for outbound spam filtering

2013-05-01 Thread David F. Skoll
On Tue, 30 Apr 2013 23:17:42 -0700 Marc Perkel wrote: > Or - open to any suggestions on blocking outbound spam. (I'm > filtering outbound for customers so I don't control the original > servers) We use quarantining (although at a higher score than for inbound mail) and rate-limiting (a given sen

Re: Testing Valid Recipients for outbound spam filtering

2013-05-01 Thread Robert Schetterer
Am 01.05.2013 08:17, schrieb Marc Perkel: > Looking for tricks. > > I'm working on improving outbound spam filtering and I'm using Exim and > testing for valid recipients doing forward recipient callouts, which I > would like to reduce. > > I'm wondering if there's any tricks to figure out at lea