Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-14 Thread Loren Wilton
I have searched around rulesemporium without much success trying to find these LOCAL_OBFU_* rules. I don't suppose you could tell me the filename that they occur in could you? (I assume they will be in /etc/mail/Spamassassin or wherever your local.cf file is for your install). Sorry, for

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-13 Thread Jeff Chan
On Wednesday, January 12, 2005, 8:15:12 AM, Darren Coleman wrote: Figured out why URIBL_SBL wasn't firing for me for that email - I can't even resolve that domain! Have tried resolving it on several machines I have shell access to (including external machines who peer with different

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-13 Thread Jeff Chan
On Wednesday, January 12, 2005, 4:57:57 PM, Jeff Chan wrote: On Wednesday, January 12, 2005, 8:15:12 AM, Darren Coleman wrote: Figured out why URIBL_SBL wasn't firing for me for that email - I can't even resolve that domain! Have tried resolving it on several machines I have shell access to

RE: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-13 Thread Darren Coleman
-Original Message- From: Jeff Chan [mailto:[EMAIL PROTECTED] Sent: 13 January 2005 01:07 To: Jeff Chan Cc: Darren Coleman; Jack L. Stone; Loren Wilton; users@spamassassin.apache.org Subject: Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules On Wednesday,

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-13 Thread Jeff Chan
On Thursday, January 13, 2005, 1:19:58 AM, Darren Coleman wrote: From: Jeff Chan [mailto:[EMAIL PROTECTED] % dig 2.0.0.127.sbl.spamhaus.org a ; DiG 8.3 2.0.0.127.sbl.spamhaus.org a ;; res options: init recurs defnam dnsrch ;; got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id:

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Loren Wilton
Well, just for grins I ran it here: Content analysis details: (11.3 points, 4.6 required) pts rule name description -- -- 2.6 LOCAL_OBFU_TADALAFIL_SUBJ Obfuscated 'TADALAFIL' in subject 0.3 SARE_WEOFFER

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Martin Hepworth
Loren Wilton wrote: Well, just for grins I ran it here: Content analysis details: (11.3 points, 4.6 required) pts rule name description -- -- 2.6 LOCAL_OBFU_TADALAFIL_SUBJ Obfuscated 'TADALAFIL' in subject

RE: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Darren Coleman
Hi Loren, Firstly, thanks for your help. I have searched around rulesemporium without much success trying to find these LOCAL_OBFU_* rules. I don't suppose you could tell me the filename that they occur in could you? (I assume they will be in /etc/mail/Spamassassin or wherever your local.cf

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Jack L. Stone
At 04:36 AM 1.12.2005 -0800, Loren Wilton wrote: Well, just for grins I ran it here: Content analysis details: (11.3 points, 4.6 required) pts rule name description -- -- 2.6 LOCAL_OBFU_TADALAFIL_SUBJ

RE: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Darren Coleman
Hmm.. I got the following on that message (having reconfigured SURBL): Content analysis details: (8.0 points, 5.0 required) 0.3 RM_hm_EmtyMsgidMessage ID is empty, or just spaces - probable spamsign 0.3 SARE_WEOFFER BODY: Offers Something 2.5 MANGLED_CIALIS BODY:

RE: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Darren Coleman
-Original Message- From: Darren Coleman [mailto:[EMAIL PROTECTED] Sent: 12 January 2005 15:29 To: Jack L. Stone; Loren Wilton; users@spamassassin.apache.org Subject: RE: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules Hmm.. I got the following on that message

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Christopher John Shaker
In my useage, SpamAssassin 3.0.2 works *way* better than the 2.XX versions of SpamAssassin. I've been training my Baysian filters, and they work really well now. SA 3.0.2 works so well that I've deleted most of my apx 400 local rules, which plugged leaks through SA 2.XX. Chris Shaker [EMAIL

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Jon Drukman
Christopher John Shaker wrote: In my useage, SpamAssassin 3.0.2 works *way* better than the 2.XX versions of SpamAssassin. I've been training my Baysian filters, and they work really well now. SA 3.0.2 works so well that I've deleted most of my apx 400 local rules, which plugged leaks through

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-12 Thread Chris Thielen
Darren Coleman wrote: Hi Loren, Firstly, thanks for your help. I have searched around rulesemporium without much success trying to find these LOCAL_OBFU_* rules. I don't suppose you could tell me the filename that they occur in could you? (I assume they will be in /etc/mail/Spamassassin or