Re: rule idea for catching 'zombie spam relays' and question of my logic

2004-09-20 Thread Stewart Nelson
The school I work at is some 20 km from the nearest phone exchange. DSL, ADSL, Cable are all non-starters here. We connect through DirecPC oneway. So our outbound connection is thorugh Telus, our local phone company. They refuse to give out a static IP. Ok, so run your smtp through their

Re: Spammers Bypassing Whitelists / Rule Suggestion / Performance

2004-09-16 Thread Stewart Nelson
Turn this around and make a rule for it. I have one and it works great. FROM_ME_TO_ME. The description says, Why the hell would I get email from myself, from outside! Well, I often send myself email, usually to store some (important to me but not sensitive) information so it can be accessed from

Re: Phishing obfuscated url detection

2004-09-15 Thread Stewart Nelson
Please visit A HREF=http://phisher.com/path/to/page;http://example.com/page/A Those ones, indeed. And, IMO easier to detect, and worthy of a higher score: A HREF=http://phisher.com/page;https://example.com/page/A Even worse: A HREF=http://123.456.78.90/page;https://example.com/page/A You can

Re: delivery to multiple mailboxes from single account

2004-09-13 Thread Stewart Nelson
Hi Bob, Many thanks for taking the time to send such a detailed reply. Your situation is similar to mine, but I'm still at SA 2.63. Last week's performance stunk at 0 false positives and 20 false negatives (a rotten 99.5% accuracy record; I'm not satisfied unless I hit 99.8%). That's awesome; I'd