Two graphic-laden spams came in this AM that missed being scored
high enough to be detected as spam:
http://intrepid.com/~gary/spam-gif-1.txt
http://intrepid.com/~gary/spam-gif-2.txt
The first is just shy of the 5.0 threshold, but the second misses
by a full point.
Am wondering how these fare on
Bill Randle wrote:
> I don't have the OCR plugin installed, but am using the recently
> posted ImageInfo plugin. This is what I get on spam-gif-1.txt:
>
> X-Spam-Status: Yes, score=20.6 required=5.0
> tests=BAYES_99,DC_GIF_MULTI_LARGO,EXTRA_MPART_TYPE,FORGED_RCVD_HELO,
> HTML_IMAGE_ONLY_32,HTML
Marc Perkel wrote:
> Maybe I missed something but I installed the gocr program and fedd it
> some stock spam files and the accuracy of what it read was really really
> poor - unusable. Is there something else I need to install?
I had the same experience. Have you tried feeding one of thos gi
Menno wrote:
> Ramprasad wrote:
> >
> > But still this mail is getting thru
> > http://ecm.netcore.co.in/tmp/imagespam.txt
> >
> I tested your mail here with the latest imageinfo.pm and it comes through
> indeed. The exact same one in .gif (same text, same background)
> was detected
> though. It wa
Theo wrote (in part):
>
> sa-update is a generic tool that lets users download
> "channels" (ie: bundles
> of rules/plugins) from anywhere that decides to publish them
> (requires a
> certain setup, etc.) At the moment, the only published
> channel that I know
> of is updates.spamassassin.org
> -Original Message-
> From: jdow [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 09, 2006 7:33 PM
> Gary Funck wrote:
> > Has anyone considered also supplying new rules in the
> > form of rpm's available via a yum-compatible repository?
> > It
On 11/29/12 14:46:25, David F. Skoll wrote:
> We greylist after the end of DATA. This wastes bandwidth, but lets us
> use the Subject: line as an additional mix in the greylisting tuple.
> This catches ratware that retries in the face of greylisting, but
> mutates the subject line with each retry.
On 11/29/12 10:44:54, John Hardin wrote:
> You will probably want to put a little effort into maintaining lists
> of regular correspondents who can bypass greylisting. There may be
> tools to automate that, e.g. to whitelist someone a local user has
> sent mail to.
Has anyone looked into the use o
> -Original Message-
> From: Keith Whyte [mailto:[EMAIL PROTECTED]
> Sent: Saturday, January 01, 2005 2:18 PM
> To: users@spamassassin.apache.org
> Subject: feed MimeDefanged mail to sa-learn?
>
>
> Maybe another, more simple way to ask the question I asked yesterday:
>
> When my MimeDefa
> -Original Message-
> From: Geoff Soper [mailto:[EMAIL PROTECTED]
> Sent: Saturday, January 01, 2005 3:49 PM
>
> Unfortunately that's not an option. I have installed the module without
> issue in my space, I don't see a problem with getting SpamAssassin to call
> that module. I just want
Attached, is a Perl script, mdf2sa.pl, which converts spam messages
that have been marked up by MIMEDefang, into a form that is similar
to the message format used by SA. Also attached is a simple
procmail script, mdf2sa.rc, which drives the perl script, and
can be invoked via formail as follows:
> From: Thomas Arend
> Sent: Monday, January 03, 2005 7:55 AM
>
> I have received a FalsePositive because arcor.de got into trhe blocklists.
>
> Has someone informations why arcor.de got into the blocklist?
>
You probably need to go to the places where the URL's are blacklisted,
and requrest that
> -Original Message-
> From: Chris Santerre [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 05, 2005 7:16 AM
>
> Just curious as to what average percent of spam people see SURBL
> hitting. In
> a non scientific manor, I average about 85% or greater hitting
> SURBL for all
> spam t
> From: Keith Whyte
> Sent: Tuesday, January 11, 2005 11:15 PM
[...]
>
> anyway, on the messages where that regex does trigger, the resulting
> mail is unreadable in Pine, which complains about not being able to open
> text attachment, and thunderbird on windows via imap, which in some
> cases j
The usual suggestions that come up at this point, are:
1) If you're using spamc/spamd, don't forget to restart spamd so
that it will reload your new rule.
2) If you're running SA directly from a milter, or some such, make
sure that SA is started up in a way that it will find the new rule.
15 matches
Mail list logo
