Re: A change in tact

2004-12-23 Thread John Andersen
On Wednesday 15 December 2004 04:48 am, Rakesh wrote: > Well even i think that has to be the final resort, but one thing wanted > to know. How much of similar kind of mails are you guys recieving ? Is > it just the begining or are we already in the middle of it. > > Rakesh Beginning and Middle imp

Re: A change in tact

2004-12-16 Thread Rakesh
Brett Cove wrote: I've noticed much of the spam containing geocities urls contain a query string at the end. Example: www.geocities.com/giovanni_campos_42/?s=lexi&m=ZVQcj.RhhQfY,hVX Is this something that occurs often in 'non-spam' geocities links? I have even recieved spam without the querystri

Re: A change in tact

2004-12-16 Thread Brett Cove
Chris Santerre wrote: [snip] I've been given a small corpa of this kind of spam. I'm trugging thru it slowly. But I think I might be able to come up with a SA rule for it. Not sure yet. I've noticed much of the spam containing geocities urls contain a query string at the end. Example: www.geocit

Re: [sa-list] A change in tact

2004-12-15 Thread Rakesh
Dan Mahoney, System Admin wrote: On Wed, 15 Dec 2004, Rakesh wrote: I think for the four or five large free website providers, a hook could be added to spamassassin -r that reports them specifically (although spamcop already does this, they'll only be advised of the actual site if you're using a

Re: [sa-list] A change in tact

2004-12-15 Thread Dan Mahoney, System Admin
On Wed, 15 Dec 2004, Rakesh wrote: I think for the four or five large free website providers, a hook could be added to spamassassin -r that reports them specifically (although spamcop already does this, they'll only be advised of the actual site if you're using a full-blown spamcop account, not

RE: A change in tact

2004-12-15 Thread Chris Santerre
>-Original Message- >From: Rakesh [mailto:[EMAIL PROTECTED] >Sent: Wednesday, December 15, 2004 5:38 AM >To: users@spamassassin.apache.org >Subject: A change in tact > > >Hii > >I am using Spamassassin with URI, Razor and DCC checks to catch spams. >Afte

Re: A change in tact

2004-12-15 Thread Rakesh
Rob McEwen wrote: Final thought: If these additional avenues don't produce results with a few weeks, I am going to send ALL of my clients an e-mail explaining the situation to them and telling them: "Geocities cannot seem to police their kiddie pron spamming to a reasonable extent and, therefore, a

RE: A change in tact

2004-12-15 Thread Rob McEwen
> So the question is how do we tackle this scenario. Either we blacklist > free hosting sites like geocities.com in SURBL and get false positives, > or > ...So how do we tackle this ? My experience with Geocities is that: (1) It often takes them one or two full business days to get a kiddie p

Re: A change in tact

2004-12-15 Thread Jeff Chan
On Wednesday, December 15, 2004, 2:37:57 AM, Rakesh Rakesh wrote: > So the question is how do we tackle this scenario. Either we blacklist > free hosting sites like geocities.com in SURBL and get false positives, > or we make a humble request to these free webhosting companies to stop > new registr

A change in tact

2004-12-15 Thread Rakesh
Hii I am using Spamassassin with URI, Razor and DCC checks to catch spams. After implementing URI checks my life had became easier. But ever since the SURBLs and URI checks became popular means of trapping spams the spammers have devised a ne way to send their mails in. Recently some of the spams h