Re: Creating new rules

2013-07-31 Thread RGB Camera
On Wed, Jul 31, 2013 at 2:06 PM, Franck Martin wrote: > > On Jul 31, 2013, at 10:08 PM, Kevin Miller > wrote: > > > Problem is, the from adddress is often a "Joe job" - i.e., a forged > address, so the domain mentioned there likely doesn't have anything to do > with the actual source of the mail

Re: Large # of Spam getting through all of a sudden.

2013-06-10 Thread RGB Camera
On Mon, Jun 10, 2013 at 11:45 AM, Duncan, Brian M. < brian.dun...@kattenlaw.com> wrote: > Over the last 7 days I have seen a large # of Spam messages making it > through our SpamAssassin 3.3.1 install. We use around 5 RBL's also. > > It looks like it is all from the same sender. > > They all seem

Re: all spam emails from mailengine1.com servers

2011-10-23 Thread RGB Camera
On Thu, Oct 20, 2011 at 3:47 PM, R - elists wrote: > > does anyone get legit emails that come from the mailengine1.com email > marketing servers? > > aka streamsend aka ezpublishing ??? Indeed, we consider it all spam too, even though we don't see lots of mail coming from there. A lot of B2B spa

Re: URIBL_RHS_DOB false positives?

2011-03-24 Thread RGB Camera
Yes, we set the pointage to 0.01 until whatever is broken gets fixed. We normally score that rule much higher than the default, and it normally works well. But it seems like there is a reset in the URIBL_RHS_DOB database or something. A lot of domains that are not new domains are now listed. >

Re: new rules - where do i activate them?

2011-03-02 Thread RGB Camera
I can't comment about the particular URIs mentioned in this discussion, but we do run some URI rules that are redundant with URIBL listings. The reason we do this is because URIBL listings will sometimes time-out and be removed. So we will list some domain names in our rules in case they are drop