Re: Fake MX

2010-12-08 Thread Raul Dias
I use to do this and it was fine. No problem in the low mx and just added points to the high mx in SA. It did help a little. A while ago I had to disable it because some major ISPs in Brazil start to block me out because of this setup. -rsd On 12/08/2010 03:32 PM, Matt wrote: Anyone using

Re: Do we need a new SMTP protocol? (OT)

2010-12-01 Thread Raul Dias
On 12/01/2010 02:13 PM, Martin Gregorie wrote: On Wed, 2010-12-01 at 07:27 -0800, Marc Perkel wrote: I've been thinking about what it would take to actually eliminate spam or reduce it to less than 10% of what it is now. One of the problems is the SMTP protocol itself. And a big problem with

Re: Problem scanning mails with Spam Assassin on Postfix

2010-08-27 Thread Raul Dias
to time. Its not all yahoo servers, but random ones. Never cared to check deeper. Just assume they need maintance as others yahoos are fine in the meanwhile. -Raul Dias

Re: How the hell barracuda behaves?

2010-08-23 Thread Raul Dias
On 08/18/2010 10:14 PM, Marc Perkel wrote: [...] They were discussing ways to reduce spam and I mentioned it. [...] I believe, that 95% of the discussion in this list is about reducing spam in a way or another. -rsd

[OT] How to deal with SPF_FAIL ?

2007-03-06 Thread Raul Dias
and whitelisting broken sender. 3 - Something else. -Raul Dias

webservices and spoofed from addresses

2007-02-25 Thread Raul Dias
even be blocked, so whats the point of doing this? (btw, cant dkim have sending hosts specifieds like spf?) -Raul Dias

Re: Using levenshtein distance to report spam

2007-02-25 Thread Raul Dias
You need a lot more of bandwidth/memory/cpu power and disk IO to do it. -Raul Dias

Re: Google Summer of Code 2007 ...

2007-02-21 Thread Raul Dias
of work (so, gsc20007). Without this kind of support, I see it will be easier in the future spammers playing with charset to avoid specific rules. -Raul Dias

Re: Google Summer of Code 2007 ...

2007-02-21 Thread Raul Dias
) normalize_charset option is set to 1. -Raul Dias --j. Raul Dias writes: On Fri, 2007-02-16 at 15:35 +, Justin Mason wrote: Theo Van Dinter writes: I'm assuming that there will be a Google Summer of Code 2007 going on, and that the ASF will be involved again. So it's a good

Re: Google Summer of Code 2007 ...

2007-02-21 Thread Raul Dias
On Wed, 2007-02-21 at 17:27 +0100, Justin Mason wrote: Raul Dias writes: On Wed, 2007-02-21 at 15:29 +0100, Justin Mason wrote: actually I think this is already implemented in 3.2.0 -- see http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4636 for details. Nice. This patch

Re: Google Summer of Code 2007 ...

2007-02-17 Thread Raul Dias
On Sat, 2007-02-17 at 11:21 +, Justin Mason wrote: Raul Dias writes: On Sat, 2007-02-17 at 02:07 +0100, Mark Martinec wrote: On Saturday February 17 2007 01:49, Matthew Wilson wrote: I was/am primarily concerned with RAM usage for high-concurrency situations. Ok. Still

WhitelistRcvdIP plugin 0.2

2007-02-16 Thread Raul Dias
For some reason I had 3 lines deleted in the plugin when I sent it. here is the correct version. -Raul Dias On Thu, 2007-02-15 at 15:26 -0300, Raul Dias wrote: Hi, I, as other people, needed to whitelist addresses that came from servers with no rdns. whitelist_from is not a good option

worst spammer ever

2007-02-16 Thread Raul Dias
What happens when a clueless newbie tries to pass spam? This happens = http://www.dias.com.br/worst-spam.txt -Raul Dias

Re: Google Summer of Code 2007 ...

2007-02-16 Thread Raul Dias
reuse. - The pluginization of SA. From Bayes to header, body, rawbody, score rules. The entire process of doing so would open doors for more external plugin usage and control. While this might bring a slightly slower startup. In the long run, the bennefits can be great. -Raul Dias

Re: Google Summer of Code 2007 ...

2007-02-16 Thread Raul Dias
played a lot with perl-loop (any loopers around?) which was the only way to go. It is too low level for most people, but perhaps POE is the way to go today (which can use perl-loop as its base). -Raul Dias

Re: dkim plugins warnings

2007-02-15 Thread Raul Dias
} = + !defined($signature-domain) ? missing d tag + : invalid domain in d tag Missing ; here, right? return 0; } -Raul Dias

Re: [2] How can I configure spamassassin to filter spam jpgs?

2007-02-15 Thread Raul Dias
environment like cygwin. -Raul Dias

new warning in sa-learn after upgrade

2007-02-15 Thread Raul Dias
. Just for the record, the sa-learn has messages (one eache time) fed thru stdin from a cyrus imapd folder. -Raul Dias

Re: user_prefs read from somewhere else

2007-02-15 Thread Raul Dias
its your users' account name. -Raul Dias On Thu, 2007-02-15 at 17:56 +0100, Alex Thorst wrote: Raul Dias schrieb: On Wed, 2007-02-14 at 15:44 +0100, Alex Thor wrote: Hi there! Is there a way to convince spamassassin to read the *user_prefs* file not from ~/.spamassassin

whitelist_from_rcvd_ip - WhitelistRcvdIP plugin

2007-02-15 Thread Raul Dias
Hi, I, as other people, needed to whitelist addresses that came from servers with no rdns. whitelist_from is not a good option, so I implemented whitelist_from_rcvd_ip as a plugin. Here is the man page. Comments are welcome. -Raul Dias NAME Mail::SpamAssassin::Plugin::WhitelistRcvdIP

Re: new warning in sa-learn after upgrade

2007-02-15 Thread Raul Dias
On Thu, 2007-02-15 at 12:45 -0500, Theo Van Dinter wrote: On Thu, Feb 15, 2007 at 02:15:47PM -0300, Raul Dias wrote: archive-iterator: invalid (undef) format in target list, 2 at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/ArchiveIterator.pm line 727, STDIN line 1. Just

Re: sa-update woring with 3.1.8 ?

2007-02-15 Thread Raul Dias
to date? because Timeout is not a plugin. -Raul Dias

Re: user_prefs read from somewhere else

2007-02-14 Thread Raul Dias
in SpamAssassin.pm. You might add more dirs instead of replace. But why not stick with sql? -Raul Dias

dkim plugins warnings

2007-02-14 Thread Raul Dias
to broken DK implementation on the sender, shouldnt this be reflect as some score instead of a warning? -Raul Dias

Remember Me? - RememberMe.pm plugin

2007-02-13 Thread Raul Dias
guys think about the idea, problems, enhancements. -Raul Dias RememberMe.pm Description: Perl program

Re: FuzzyOCR mature enough?

2007-02-12 Thread Raul Dias
Be aware that it may give you some false positives on images with texts. Even in pt_BR (in my case). -Raul Dias On Sun, 2007-02-11 at 23:38 -0600, René Berber wrote: Peter wrote: I have seen a lot of buzz around FuzzyOCR lately but by looking at its web site it shows that the project

saving matching values

2007-02-11 Thread Raul Dias
There are some cases, that it is desired to match part a value from a header, to another value somewhere else. Is there a way for SA to retain the value matched in a RE like $1/$2 matching parentheses, so that it might be used later (or at least in the next rule)? -Raul Dias

Re: saving matching values

2007-02-11 Thread Raul Dias
On Sun, 2007-02-11 at 15:49 -0500, Matt Kettler wrote: Raul Dias wrote: There are some cases, that it is desired to match part a value from a header, to another value somewhere else. Is there a way for SA to retain the value matched in a RE like $1/$2 matching parentheses, so

Re: IADB, 70_iadb.cf and multiple A records returned

2007-02-10 Thread Raul Dias
commented out) If spamhaus decides expand the ruturn code and 127.0.0.20 becomes valid for something like this ip has an opt-in list, this rule would be broken, right? (sure, we dont expect this change to happen). -Raul Dias

Re: A New Approach: Find the Ham

2007-02-10 Thread Raul Dias
Bayes is missed (per user is used), but would help separated the grey area even more for non monitored users or low volume users. in the scripts side I use Mail::IMAPClient and I urge anyone writting your own scripts to stay away from Mail::Box. -Raul Dias

Re: IADB, 70_iadb.cf and multiple A records returned

2007-02-10 Thread Raul Dias
On Sat, 2007-02-10 at 16:53 -0500, Theo Van Dinter wrote: On Sat, Feb 10, 2007 at 10:09:35AM -0300, Raul Dias wrote: This also implies that the sub-test values is always a RE and needs to be proper delimeted. If you read perldoc Mail::SpamAssassin::Conf, specifically the check_rbl_sub

Charset dealing in SA

2007-02-10 Thread Raul Dias
everything to utf-8 first before running the REs? This is something to consider with most non english languages. Or is this something I shouldn't worry about? -Raul Dias

IADB, 70_iadb.cf and multiple A records returned

2007-02-09 Thread Raul Dias
? If it really is a RE, what preventes '127.0.0.1' to not match 127.0.0.10? Or 127.1.0.1 to not match 127.120.1.1 ? Shouldn't the dots be escaped too? Thats enought for now :) - Raul Dias

Re: can you trust the MX?

2007-01-30 Thread Raul Dias
that domain (if it delivers any outbound mail at all). Would a whitelist_from_mx option perhaps be worthwile? Being sent from the mx is a legitimate deliverer, but I dont think that worth being whitelisted. On the other hand comming from the MX would worth some bonus points. -Raul Dias

RE: Poor man's high MX spam Trap

2007-01-30 Thread Raul Dias
being whitelisted, it can enable all mails from that host, which would also prevents your problem automatically in a few days. (I dont really like this, though). -Raul Dias

Re: block subject + subdomain

2007-01-30 Thread Raul Dias
and then filter a copy to check it out for some time. If you have procmail, you can try something like: :0 c * ^X-Spam-Status:.*ADD_YOUR_RULE_NAME_HERE.* /spam/emv1_net.mbox -Raul Dias

RE: Poor man's high MX spam Trap

2007-01-29 Thread Raul Dias
) Sub that for an aliases ip address in your server that can be reach from the outside. -Raul Dias

Request for Opnion: HostAutoWhiteList (HAWL)

2007-01-29 Thread Raul Dias
I would like to know opnions

FULL: Request for Opnion: HostAutoWhiteList (HAWL)

2007-01-29 Thread Raul Dias
/ham counts that would make HAWL be ignored [0] ) - high ratio limit (same, for upper limit). So, what do you think? what to change? what to take care of? -Raul Dias

RE: Poor man's high MX spam Trap

2007-01-29 Thread Raul Dias
this: @ MX 1 fake.domain @ MX 10 real.domain @ MX 100 mx2.domain @ MX 1000 fake.domain fake.domain have no ip address mx2.domain is the fake mx that points to real.domain. Good results so far. -Raul Dias

RE: FULL: Request for Opnion: HostAutoWhiteList (HAWL)

2007-01-29 Thread Raul Dias
. -Raul Dias

Re: Poor man's high MX spam Trap

2007-01-29 Thread Raul Dias
, is to list a genuine (but firewalled) address. Done. Thanks for the heads up. -Raul Dias

per-user and site-wide bayes databases toghether

2007-01-26 Thread Raul Dias
welcome. Raul Dias

Poor man's high MX spam Trap

2007-01-26 Thread Raul Dias
SA steps, the hand made rule is faster. -Raul Dias

Re: Bayes test in spamassassin.bat

2006-09-11 Thread Raul Dias
Hi, What MUA are you using? Your MUA seems to be unable to send HTML mail, so I suggest you configure it to send only text/plain formatted text. []s Raul Dias On Mon, 2006-09-11 at 07:50 -0700, Floyd wrote: Hi, I am using Spamassassin with Exchange and i noticed I was getting different

Re: postcard exploit email

2006-09-11 Thread Raul Dias
domain in the main and where the link is pointing (e.g. foobar.com vs foobar.com.b.fm), but this could cause more FP than help, _me _sa thinks. Another way is thru SURBL, but the host can change faster than SURBL. []s Raul Dias

Habeas?

2005-11-08 Thread Raul Dias
Hi, What happened to Habeas support in SA? More than a year ago there was a discussion about using habeas. There were patchs in there site (gone/broken link) and it would be incorporated into SA 3.0.x. Now we have SA 3.1 and no sign of habeas support. Is it gone for good? Raul Dias

Re: Habeas?

2005-11-08 Thread Raul Dias
My bad. I grep the wrong dir. Do I need to enable it? It doesn't seem to be working here. ( and now that I said that I can't find a habeas message here to test *grin*) Raul Dias On Tue, 2005-11-08 at 13:28 -0500, Matt Kettler wrote: Raul Dias wrote: Hi, What happened to Habeas

Re: DK_SIGNED from yahoo

2005-11-01 Thread Raul Dias
Groups all I get is DK_SIGNED. Can you run it in your sa? [spamassassin|spamc] message What version of Mail::DomainKeys do you have? Maybe even at Yahoo, domainkeys is not 100% installed across the SMTP servers (although, I would expected it to be). Regards, Raul Dias Posted-Date: Mon, 31 Oct

DK_SIGNED from yahoo

2005-10-31 Thread Raul Dias
of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/ 8 Thanks, Raul Dias

Re: Wiki 3.1.0 upgrade page, strange commentary...

2005-10-31 Thread Raul Dias
the archieves and docs, for any reference of this and found none before I upgraded. The X-Spam.* headers are always present. []'s Raul Dias

Re: Is SPF working 100%? Problems with hotmail.com

2005-06-07 Thread Raul Dias
On Tue, 2005-06-07 at 09:12 +0200, Niek wrote: On 6/6/2005 10:50 PM +0200, Raul Dias wrote: Ok, I findout some stuff here: 1 - This is not the only message this happens. Other messages that should have triggered SPF rules did not. 2 - This is happening when using spamd. 3

Re: Is SPF working 100%? Problems with hotmail.com

2005-06-07 Thread Raul Dias
On Tue, 2005-06-07 at 12:49 -0500, David B Funk wrote: On Tue, 7 Jun 2005, Raul Dias wrote: SPF would never work if not there, right? Note that it does work, but not always. I have never see it fail from calling the spamassassin form the command line, just as spamd. It has enough

Is SPF working 100%? Problems with hotmail.com

2005-06-06 Thread Raul Dias
ip4:209.1.112.0/23 ~all ... And here it is 64.4.0.0/18, which 64.4.22.61 belongs. So, my question is why there was no SPF_* result for this entry? Is this a bug? Or am I missing the point? Mail::SPF::Query is the latest one. Other hotmail messages got the SPF_HELO_PASS fine. - Raul

Re: Is SPF working 100%? Problems with hotmail.com

2005-06-06 Thread Raul Dias
, for some reason, spamd sometimes skips SPF tests. Is this right? Would spamd skip some tests for any reason? Load? Network timeout? Any pointer is appreciated. - Raul Dias On Mon, 2005-06-06 at 17:32 -0300, Raul Dias wrote: hi, Is the SPF code working 100%? I got a mail from hotmail that did