Hi,
Need some inputs from the experts.
I am planning to switch to postfix + mailscanner + sa +
clamav. Just want to know one thing before doing that. I have kaspersky linux
edition. Can I create two antivirus scanning layers in mailscanner?
Warm Regards,
Suhas
System Administ
I am wondering why this mail failed in 2.5 FORGED_HOTMAIL_RCVD Forged hotmail.com 'Received:'
header found test?
Can anyone help me out in understanding why?
Received: from bay0-omc3-s8.bay0.hotmail.com [65.54.246.208] by
qualispace.com with ESMTP
(SMTPD-8.22) id ADCC0278; Fri
Even I'd be interested in something for postfix and iptables.
Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
@spamassassin.apache.org
Subject: Re: How do i catch this
On Wed, November 1, 2006 09:27, Suhas \(QualiSpace\) wrote:
> How do I catch these types of mails?
>
> Received: from wk-2022 [125.92.211.28] by ourdomain.com
Don't accept mail from non-fully-qualified HELOs ?
Hi,
How do I catch these types of mails?
Received: from wk-2022
[125.92.211.28] by ourdomain.com
(SMTPD-8.22) id AF800E44; Wed, 01 Nov 2006 01:32:32 -0500
Received: (qmail 1474 invoked by uid 0); Wed, 1 Nov 2006 14:30:22 -)
Received: from unknown (HELO evmneyumjf) (192.168.1.7
MSGID_SPAM_LETTERS /var/log/maillog* or
whatever your log is, and see what it's hitting. If it's not hitting any
ham, then you might be okay raising the score a bit. Note this isn't a
scientific, nor thourough check, so ymmv..
Ken A
Pacific.Net
Suhas (QualiSpace) wrote:
> Hi friends,
e.com
-Original Message-
From: nick [mailto:[EMAIL PROTECTED]
Sent: Monday, October 30, 2006 10:07 PM
To: [EMAIL PROTECTED]
Cc: users@spamassassin.apache.org
Subject: Re: FW: MSGID_SPAM_LETTERS
Suhas (QualiSpace) wrote:
> Expecting some feedback on this.
>
>
>
> Tha
===
For Any Technical Query Please Use: http://helpdesk.qualispace.com
QualiSpace Community Discussion forum: http://forum.qualispace.com
From: Suhas
(QualiSpace) [mailto:[EMAIL PROTECTED]
Sent: Monday, October 30, 2006
12:29 PM
To: users
What does MSGID_SPAM_LETTERS
mean?
Can I increase the
core for this? Will it lead to false positives?
Since last two weeks
we are getting lot of spam emails. I found that all these mails has one thing
in common which hits MSGID_SPAM_LETTERS.
Warm Regards,
Suhas
System Administ
Even it is getting slipped thru the AV
Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
===
For Any
I am getting lots of mails like this. How to block it?
Subject: Good day
The message contains Unicode characters and has been sent
as a binary
attachment.
Warm Regards,
Suhas
System Administrator
QualiSpace - A
QuantumPages Enterprise
===
Tel India:
: Spam and Virus attacks on my server
Suhas (QualiSpace) wrote:
> Can anybody help me in writing a rule to score the mails with subject
"Mail
> Server Report"? I am using SA 3.0.1 (windows version)
>
Here's a rule for ya:
header L_SUBJ_SRV_RPT Subject =~ /Mail
ispace.com
-Original Message-
From: David f. [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 19, 2006 6:21 PM
Cc: users@spamassassin.apache.org
Subject: Re: FW: Spam and Virus attacks on my server
Suhas (QualiSpace) wrote:
> Waiting for it. Very urgent
>
> Warm Regards,
> Suhas
> Syst
Query Please Use: http://helpdesk.qualispace.com
QualiSpace Community Discussion forum: http://forum.qualispace.com
-Original Message-
From: Suhas (QualiSpace) [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 19, 2006 5:45 PM
To: 'Giampaolo Tomassoni'
Cc: users@spamassassin.
e Use: http://helpdesk.qualispace.com
> QualiSpace Community Discussion forum: http://forum.qualispace.com
>
> -Original Message-
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 19, 2006 5:35 PM
> To: [EMAIL PROTECTED]
> Cc: users@spamassassin.
users@spamassassin.apache.org
Subject: Re: Spam and Virus attacks on my server
Suhas (QualiSpace) wrote:
>
> Hi friends,
>
> I am getting lot of virus/spam mails with the subject "Mail server
> report". Have any body cracked any rules for such spam?
>
They're viruses.. I'd suggest clamav.
Hi friends,
I am getting lot of virus/spam mails with the subject "Mail
server report”. Have any body cracked any rules for such spam?
Warm Regards,
Suhas
System Administrator
QualiSpace - A
QuantumPages Enterprise
===
Tel India:
+91 (22) 6792 - 1480
Te
Even I did the same thing and it worked pretty well.
Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
=
Even I am getting lot of those.
Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
===
For Any Techni
>From where do I obtain imageinfo.cf?
Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://www.qualispace.com
===
For Any
Subject: Re: ALL_TRUSTED creating a problem
On Monday 16 October 2006 13:32, Suhas (QualiSpace) took the opportunity to
say:
> Most of the spam emails are getting through due to ALL_TRUSTED. If
> ALL_TRUSTED (is reducing the score) was not there then they might have
> caught by SA. What c
Hello,
Most of the spam emails are getting through due to ALL_TRUSTED.
If ALL_TRUSTED (is reducing the score) was not there then they might have
caught by SA. What can be the solution on this; I haven’t declared any
trusted networks yet and using the default setting. I am using SA 3.0.1
Hello,
Which rule will help me in checking if senders
domain has MX record or not. E.g I am getting email from [EMAIL PROTECTED], then the rule should check
whether domain.com has an MX record or not.
Warm Regards,
Suhas
System Administrator
QualiSpace - A
QuantumPa
How to disable ALL_TRUSTED
?
Warm Regards,
Suhas
System Administrator
QualiSpace - A
QuantumPages Enterprise
===
Tel India:
+91 (22) 6792 - 1480
Tel US:
+1 (614) 827 - 1224
Fax India:
+91 (22) 2530 - 3166
URL: http://www.qualispace.com
=
Anyone aware of BOGUS_ATTACH_SCAN
, how it helps? From where to get it?
I need a rule which will scan zip
attachment and report if it is password protected.
Warm Regards,
Suhas
System Administrator
QualiSpace - A
QuantumPages Enterprise
===
Tel India:
+
wrote:
> On Fri, Oct 13, 2006 at 09:35:33PM +0530, Suhas (QualiSpace) wrote:
> > I have added those to the local.cf but doesn't seems to be working,
> > what could be the reason?
>
> These rule score adjustments depend on having added some of the SARE
> rules; I'
I have added those to the local.cf but doesn't seems to be working, what
could be the reason?
Warm Regards,
Suhas
System Admin
QualiSpace - A QuantumPages Enterprise
===
Tel India: +91 (22) 6792 - 1480
Tel US: +1 (614) 827 - 1224
Fax India: +91 (22) 2530 - 3166
URL: http://
@spamassassin.apache.org
Subject: Re: Message not flagged
as spam
On Oct 13, 2006, at 4:11 AM, Suhas (QualiSpace) wrote:
Can
anybody explain me why SA did not flagged this message as spam?
X-Spam-Status: No, score=-81.0 required=4.5
tests=BAYES_40,HELO_DYNAMIC_HCC,
HELO_DYNAMIC_IPADDR2
Hello,
Can anybody explain me why SA did not flagged this message
as spam?
X-Spam-Status: No, score=-81.0 required=4.5
tests=BAYES_40,HELO_DYNAMIC_HCC,
HELO_DYNAMIC_IPADDR2,HTML_90_100,HTML_FONT_BIG,HTML_IMAGE_ONLY_08,
HTML_MESSAGE,MIME_HTML_MOSTLY,MIME_QP_LONG
tober 12, 2006 10:54 PM
To: users@spamassassin.apache.org
Subject: RE: How to disable this?
Suhas (QualiSpace) wrote:
> I don't want all this to be displayed in the email. From where do I
> remove it?
>
> FYI I am running SA 3.0.1 on windows platform.
>
> Spam detection sof
?
Suhas (QualiSpace) wrote:
> I don't want all this to be displayed in the email. From where do I
> remove it?
>
> FYI I am running SA 3.0.1 on windows platform.
>
> Spam detection software, running on the system "mirackle1", has
> identified this incoming e
I don’t
want all this to be displayed in the email. From where do I remove it?
FYI I am running
SA 3.0.1 on windows platform.
Spam detection
software, running on the system "mirackle1", has
identified this incoming email as possible spam. The original
message
has been attached t
Hello,
I am running SA on windows platform. From where do I get ClamAVPlugin
for SA to run on Win32 environment?
Warm Regards,
Suhas
System Administrator
QualiSpace - A
QuantumPages Enterprise
===
Tel India:
+91 (22) 6792 - 1480
Tel US:
+1 (614) 827 - 1
33 matches
Mail list logo
