Re: message with drug ad image only

2005-12-15 Thread Graham Murray
Matt Kettler [EMAIL PROTECTED] writes: The last mass-checks for 3.1.0 gave it a S/O of about 0.980, but I'm seeing more like 0.900 out of DCC at my site. Could just be the nature of my site, but about a dozen common subscriber newsletters at my site consistently hit it. Which is why it is a

Re: DCC hits of nonspam (message with drug ad image only )

2005-12-15 Thread Matt Kettler
Graham Murray wrote: Matt Kettler [EMAIL PROTECTED] writes: The last mass-checks for 3.1.0 gave it a S/O of about 0.980, but I'm seeing more like 0.900 out of DCC at my site. Could just be the nature of my site, but about a dozen common subscriber newsletters at my site consistently hit it.

Re: message with drug ad image only

2005-12-13 Thread Amos
On 12/12/05, Matt Kettler [EMAIL PROTECTED] wrote: (plus DIGEST_MULTIPLE) resulted in 6.27 points. And that's with me trimming down the DCC_CHECK score to 1.5 from 2.17. Any particular reason for this?

Re: message with drug ad image only

2005-12-13 Thread Matt Kettler
At 09:25 PM 12/13/2005, Amos wrote: On 12/12/05, Matt Kettler [EMAIL PROTECTED] wrote: (plus DIGEST_MULTIPLE) resulted in 6.27 points. And that's with me trimming down the DCC_CHECK score to 1.5 from 2.17. Any particular reason for this? I've had too many legitimate newsletters

Re: message with drug ad image only

2005-12-12 Thread Matt Kettler
Pollywog wrote: On 12/11/2005 05:31 pm, Kai Schaetzl wrote: Craig Zeigler wrote on Sun, 11 Dec 2005 11:11:15 -0500: The filename is Part 1.1.jpg. Use MailScanner or another tool to reject/delete mail with that name. If it is coming from zombies, just disallow zombies at MTA level. Not

Re: message with drug ad image only

2005-12-12 Thread Fred
Craig Zeigler wrote: I have been getting hundreds of these messages per day and don't know how to stop them. The bayes is only come back at 60%. They are the messages advertising drugs with a random subject (yes, I know, one of the many) The filename is Part 1.1.jpg. There is no virus that I

message with drug ad image only

2005-12-11 Thread Craig Zeigler
I have been getting hundreds of these messages per day and don't know how to stop them. The bayes is only come back at 60%. They are the messages advertising drugs with a random subject (yes, I know, one of the many) The filename is Part 1.1.jpg. There is no virus that I can find. Does

Re: message with drug ad image only

2005-12-11 Thread Pollywog
On 12/11/2005 04:11 pm, Craig Zeigler wrote: I have been getting hundreds of these messages per day and don't know how to stop them. The bayes is only come back at 60%. They are the messages advertising drugs with a random subject (yes, I know, one of the many) The filename is Part 1.1.jpg.

Re: message with drug ad image only

2005-12-11 Thread Kai Schaetzl
Craig Zeigler wrote on Sun, 11 Dec 2005 11:11:15 -0500: The filename is Part 1.1.jpg. Use MailScanner or another tool to reject/delete mail with that name. If it is coming from zombies, just disallow zombies at MTA level. Not everything anti-spam should be done with SA. Kai -- Kai Schätzl,

Re: message with drug ad image only

2005-12-11 Thread Pollywog
On 12/11/2005 05:31 pm, Kai Schaetzl wrote: Craig Zeigler wrote on Sun, 11 Dec 2005 11:11:15 -0500: The filename is Part 1.1.jpg. Use MailScanner or another tool to reject/delete mail with that name. If it is coming from zombies, just disallow zombies at MTA level. Not everything anti-spam

Re: message with drug ad image only

2005-12-11 Thread Kai Schaetzl
Pollywog wrote on Sun, 11 Dec 2005 17:42:38 +: they do use different names for their files well, not according to his posting. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: message with drug ad image only

2005-12-11 Thread Pollywog
On 12/11/2005 08:31 pm, Kai Schaetzl wrote: Pollywog wrote on Sun, 11 Dec 2005 17:42:38 +: they do use different names for their files well, not according to his posting. The only thing I could think of to deal with it was to add a Maildrop rule to send such files to the spam folder

Re: message with drug ad image only

2005-12-11 Thread hamann . w
Hi, while I o not ilke neither html mails nor outlook stationery, they seem to ne a fact of life. A rule that drops mails with an image might drop mails using stationary Wolfgang Hamann On 12/11/2005 08:31 pm, Kai Schaetzl wrote: Pollywog wrote on Sun, 11 Dec 2005 17:42:38 +: they