Re: Anyone have a rule to detect "Dear xxx" in the body of the message where the "To:" address is xxx@domain?

2024-07-18 Thread Grant Taylor via users
On 7/18/24 15:58, Mark London wrote: I asked ChatGPT how to test for a "Dear 'username'".  After a bit of work, I got working code. Okay. ChatGPT knows perl. I question the value of "knows" as in knowledge of Perl. I already had a Perl file EvalTests.pm file with customized Perl eval func

Re: DATE_IN_FUTURE_24_48 more often?

2024-07-18 Thread Greg Troxel
Marc writes: > I think I am starting to see this more often. Today I was checking > again every server to see if the ntp time is syncing properly. But > don't notice anything weird, can't really believe this sending had a > bad clock. Can anyone suggest what/where to look for? > > > DATE_IN_FUTUR

Re: Re: Anyone have a rule to detect "Dear xxx" in the body of the message where the "To:" address is xxx@domain?

2024-07-18 Thread Mark London
I asked ChatGPT how to test for a "Dear 'username'". After a bit of work, I got working code. ChatGPT knows perl. I already had a Perl file EvalTests.pm file with customized Perl eval functions, so I threw it in there. Otherwise, you'll need to create your own file with the proper headers.

DATE_IN_FUTURE_24_48 more often?

2024-07-18 Thread Marc
I think I am starting to see this more often. Today I was checking again every server to see if the ntp time is syncing properly. But don't notice anything weird, can't really believe this sending had a bad clock. Can anyone suggest what/where to look for? DATE_IN_FUTURE_24_48 Date: is 24 to

Re: Blocking Malformed "From" Headers

2024-07-18 Thread Bill Cole
On 2024-07-17 at 13:17:16 UTC-0400 (Wed, 17 Jul 2024 10:17:16 -0700) Kirk Ismay is rumored to have said: I have a spammer using a malformed From header, as follows: From: sha...@marketcrank.com The envelope from is: direcc...@delher.com.mx, and I've set up blocks for that address. Sendmail

Evaluate UTF-8 From / Subject

2024-07-18 Thread Nikolaos Milas
Hello, Is there a way we can search for strings in UTF-8 encoded From and/or Subject headers? For example, here is part of a phishing mail header: ... From: =?utf-8?B?Is6VzpjOnc6ZzprOlyDOpM6hzpHOoM6VzpbOkSI=?=   To: exam...@example.com Message-id: <9d6ceda2599640f6....@amtelecom.net> Date