[OT] RBLs

2012-01-11 Thread --[ UxBoD ]--
Hi, we have seen a recent upsurge in SPAM and would like to ask the community for recommendations on both free and commercial RBL offerings. We are currently using: Barracuda SpamRats JunkEmailFilter SpamEatingMonkey Plus the standard ones that are checked with SpamAssassin. We are also

Re: [OT] RBLs

2012-01-11 Thread --[ UxBoD ]--
of our clients and at 06:42 it appeared on one of the RBLs. I am guessing that it must have been a huge spam mailing that hit a lot of honeypots and people all at once. Downside is not a happy client ;( -- Thanks, Phil - Original Message - Am 11.01.2012 12:28, schrieb --[ UxBoD ]--: Hi

Re: [OT] was SORBS

2010-05-02 Thread --[ UxBoD ]--
- Original Message - On Fri, 2010-04-30 at 16:50 +0100, Nigel Frankcom wrote: We're on a BT only exchange here so it's them or nothing, well not quite, I could go CoLo... hmmm maybe not, or satellite, I was involved in setting that up in Cyprus. Nigel Is there such a thing?

Re: Increase in image/zip spam?

2010-04-12 Thread --[ UxBoD ]--
- Original Message - Hi, Just wondering if others are also seeing an increase in image spam in the last week or so, some of which contain zip attachments? The body contains random bayes killer? text with an image or zip attachment. I can't otherwise find something to trigger on to

Re: The Impossible Rule??? Bug???

2010-03-23 Thread --[ UxBoD ]--
- corpus.defero corpus.def...@idnet.com wrote: I was looking at a piece of irritating pill spam this morning ((http://pastebin.com/qzj83QKq)) and noticed this in the body, just after a random excerpt from chapter 58 of 'The Awakening': ---34AD8EF316667417464496762D36F3502061F3

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread --[ UxBoD ]--
- Per Jessen p...@computer.org wrote: Jonas Eckerman wrote: (And of course, if this catches on, you'll have to provide RFC style documentation.) See Justins posting from two days back: http://tools.ietf.org/draft/draft-stumpf-dns-mtamark/

Re: MTX plugin created (Re: Spam filtering similar to SPF, less breakage)

2010-02-11 Thread --[ UxBoD ]--
- dar...@chaosreigns.com wrote: http://www.chaosreigns.com/mtx/ -- Democracy is the theory that the common people know what they want, and deserve to get it good and hard. - H. L. Mencken http://www.ChaosReigns.com Like the simplicity and it does appear to be a great idea. Why do

Re: [OT?] Web Form Spam

2010-01-29 Thread --[ UxBoD ]--
- te...@cnysupport.com wrote: I've recently started receiving web form spam, but I'm not quite sure what to make of it. My websites contains a couple of support request forms that ask for minimal information (business name, name, phone, problem, email address). Recently, I've

Re: pill image spam learns to walk

2010-01-11 Thread --[ UxBoD ]--
- Mike Cardwell spamassassin-us...@lists.grepular.com wrote: | On 11/01/2010 10:22, Jason Haar wrote: | Hi there | | We've been getting a few of these leaking through in the past couple | of | weeks. | | http://pastebin.com/m574da717 | | They aren't triggering (enough) network rule

Re: Is this list working?

2009-10-26 Thread --[ UxBoD ]--
- Lars Ebeling lars.ebel...@leopg9.no-ip.org wrote: | Or am I blacklisted? | | -- | Regards | Lars Ebeling All appears okay ... -- This message has been scanned for viruses and dangerous content and is believed to be clean. SplatNIX IT Services :: Innovation through collaboration

Re: OT bad news

2009-10-06 Thread --[ UxBoD ]--
- Quanah Gibson-Mount qua...@zimbra.com wrote: | --On Monday, October 05, 2009 11:50 PM +0200 mouss | mo...@ml.netoyen.net | wrote: | | Thomas Mullins a écrit : | We have been running Spamassassin for maybe eight years now. But, | my | coworkers do not like OpenSource. So they have

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
- Clunk Werclick mailbacku...@googlemail.com wrote: | On Sun, 2009-09-13 at 16:37 -0600, LuKreme wrote: | On 12-Sep-2009, at 10:27, Clunk Werclick wrote: | I disagree. It can do as much harm as good. My own view and | observation | from the past have rendered it pointless in my

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
- Clunk Werclick mailbacku...@googlemail.com wrote: | On Mon, 2009-09-14 at 11:46 +0200, Matus UHLAR - fantomas wrote: |On 12-Sep-2009, at 10:27, Clunk Werclick wrote: | I disagree. It can do as much harm as good. My own view and | observation from the past have rendered it

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
- Matus UHLAR - fantomas uh...@fantomas.sk wrote: | On 12-Sep-2009, at 10:27, Clunk Werclick wrote: | I disagree. It can do as much harm as good. My own view and | observation from the past have rendered it pointless in my | context. It | adds latency, is easily poisoned

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
Clunk Werclick mailbacku...@googlemail.com wrote: | On Mon, 2009-09-14 at 12:24 +0100, --[ UxBoD ]-- wrote: | - Clunk Werclick mailbacku...@googlemail.com wrote: | | | On Mon, 2009-09-14 at 11:46 +0200, Matus UHLAR - fantomas wrote: | |On 12-Sep-2009, at 10:27, Clunk Werclick

Re: [sa] Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
- Charles Gregory cgreg...@hwcn.org wrote: | On Mon, 14 Sep 2009, Clunk Werclick wrote: | Clearly not - but then, using Spamassassin as a filter ensures just | about everything gets through CUNTFACE. | | Congratulations! You've done something I have very rarely seen | on any internet

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
- Chris Owen ow...@hubris.net wrote: | On Sep 14, 2009, at 11:38 AM, LuKreme wrote: | | On 14-Sep-2009, at 10:17, jdow wrote: | :0 | * 9876543210^0 ^From: .*\mailbacku...@googlemail.com\ | * 9876543210^0 ^From:.*clunk\.wercl...@wibblywobblyteapot\.co\.uk | /dev/null | | Will work

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
- LuKreme krem...@kreme.com wrote: | On 14-Sep-2009, at 10:17, jdow wrote: | :0 | * 9876543210^0 ^From: .*\mailbacku...@googlemail.com\ | * 9876543210^0 ^From:.*clunk\.wercl...@wibblywobblyteapot\.co\.uk | /dev/null | | Will work better. (and you don't need a lock on /dev/null) | | -- |

Re: .cn domain age query?

2009-09-14 Thread --[ UxBoD ]--
- Bill Landry b...@inetmsg.com wrote: | On Mon, 14 Sep 2009, Warren Togami wrote: | | One thing they all have in common is their registration dates are | very | young according to whois lookups. It seems in general if we had a | reliable way to lookup domain age we might be able to |

Re: .cn domain age query?

2009-09-14 Thread --[ UxBoD ]--
- Karsten Bräckelmann guent...@rudersport.de wrote: | On Mon, 2009-09-14 at 18:55 +0100, --[ UxBoD ]-- wrote: | | Still working fine for me here, 51 hits so far today against DOB. | | Not come across that RBL before! Thanks :) | | grep _DOB *.cf# Part of the stock rule-set

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
- Benny Pedersen m...@junc.org wrote: | On man 14 sep 2009 16:54:39 CEST, Bill Landry wrote | So how far does someone have to go before getting banned from the | list? Is this not far enough yet? | | he just come back with another sender email, with another reply-to, it | | will be

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread --[ UxBoD ]--
- Clunk Werclick mailbacku...@googlemail.com wrote: | On Mon, 2009-09-14 at 19:52 +0100, --[ UxBoD ]-- wrote: | - Benny Pedersen m...@junc.org wrote: | | | On man 14 sep 2009 16:54:39 CEST, Bill Landry wrote | | So how far does someone have to go before getting banned from

Flag Image SPAM

2009-08-29 Thread --[ UxBoD ]--
Hi, Cannot recall seeing a follow up to John H new rules; Are they available now or still under test review ? Best Regards, -- This message has been scanned for viruses and dangerous content and is believed to be clean. SplatNIX IT Services :: Innovation through collaboration

Re: Barracuda RBL in first place

2009-08-15 Thread --[ UxBoD ]--
- Marc Perkel m...@perkel.com wrote: Aaron Wolfe wrote: On Fri, Aug 14, 2009 at 11:24 AM, Chris Owen ow...@hubris.net wrote: On Aug 14, 2009, at 10:13 AM, Mike Cardwell wrote: The comparisons on that page are useless. What matters is list policy, reliability and reputation.

Re: Elusive spam

2009-08-13 Thread --[ UxBoD ]--
- John Hardin jhar...@impsec.org wrote: On Wed, 2009-08-12 at 16:20 -0700, Ted Mittelstaedt wrote: Maybe this will sound dumb but wouldn't it be perfectly safe to blacklist example.com after all, that isn't a domain your ever going to get mail from. Ted That is there because

Re: Low score

2009-08-12 Thread --[ UxBoD ]--
- Thomas Casartello tcasarte...@wsc.ma.edu wrote: Been getting a lot of low scoring stuff like this lately. Any suggestions? Please post the complete email to pastbin so we can run it through our own installations. It would help if you let us know which rules it actually hit on in

AutoWhiteList

2009-07-31 Thread --[ UxBoD ]--
Hi, Where can I find sa-awlUtil as it does not appear to be in the download file ? Best Regards, -- SplatNIX IT Services :: Innovation through collaboration

Re: Cant Post Message

2009-07-31 Thread --[ UxBoD ]--
- twofers twof...@yahoo.com wrote: I have a post I have tried several times over the last week to post to this forum and it never seems to get posted. I don't understand why? There is nothing exotic about it, just text, a question and email header info I pasted. Any idea whats up?

RelayCountry Check

2009-07-28 Thread --[ UxBoD ]--
Hi, Would somebody please let me know what is required to get it to work :) I have installed the Perl module and enabled the plugin but it never appears to hit :( Best Regards, -- SplatNIX IT Services :: Innovation through collaboration

Re: RelayCountry Check

2009-07-28 Thread --[ UxBoD ]--
- Mariusz Kruk k...@epsilon.eu.org wrote: On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote: Hi, Would somebody please let me know what is required to get it to work :) I have installed the Perl module and enabled the plugin but it never appears to hit :( The plugin itself

Re: RelayCountry Check

2009-07-28 Thread --[ UxBoD ]--
- Mariusz Kruk k...@epsilon.eu.org wrote: On Tue, 2009-07-28 at 11:29 +0100, --[ UxBoD ]-- wrote: - Mariusz Kruk k...@epsilon.eu.org wrote: On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote: Hi, Would somebody please let me know what is required to get

Re: RelayCountry Check

2009-07-28 Thread --[ UxBoD ]--
- Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote: Would somebody please let me know what is required to get it to work :) I have installed the Perl module and enabled the plugin but it never appears to hit

Re: Any one interested in using a proper forum?

2009-07-28 Thread --[ UxBoD ]--
- snowweb pe...@snowweb.co.uk wrote: I don't know about anyone else, but I'm getting a bit hacked of with this 1980's style forum. I'm trying to get to the bottom of an SA issue and this list/forum thing is giving me a bigger headache than SA! Spamassassin has more than one or two

Re: RelayCountry Check

2009-07-28 Thread --[ UxBoD ]--
- Stefan ste...@localside.net wrote: --[ UxBoD ]--: - Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote: Would somebody please let me know what is required to get it to work :) I have installed the Perl module

Re: Celebrity spams

2008-03-28 Thread --[ UxBoD ]--
look at line 55 of the pastebin ;) you can use that URL I believe. Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44

Re: Celebrity spams

2008-03-27 Thread --[ UxBoD ]--
why not :- util_rb_2tld grupogsv.com as that appears as part of the link ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84

Re: SpamAssassin hogs the CPU

2008-03-17 Thread --[ UxBoD ]--
What RBL lookup lists are you using ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone: [EMAIL

Re: Multiple Images spam

2008-03-12 Thread --[ UxBoD ]--
in message 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% [score: 0.5003] 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import

Re: script to send mail when error detected in log file

2008-03-04 Thread --[ UxBoD ]--
this link works just fine :- http://mesh.dl.sourceforge.net/sourceforge/swatch/swatch-3.2.2.tar.gz Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net

Re: What is a pid file

2008-02-28 Thread --[ UxBoD ]--
Process Identifier. When any process is forked (started) it will have unique number associated with it. It will also have a PPID (Parent Process Identifier) ie. what was the process that forked the child. http://en.wikipedia.org/wiki/Process_identifier Regards, -- --[ UxBoD ]-- // PGP Key

Re: What is a pid file

2008-02-28 Thread --[ UxBoD ]--
Pidfile holds the PID of the forked process ie. /var/run/MailScanner.pid Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone

Re: Too false negative

2008-02-27 Thread --[ UxBoD ]--
policyd works a treat :) V2 is also in development aswell. Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869

Re: Need rule for this type of spam

2008-02-27 Thread --[ UxBoD ]--
JM_SOUGHT_3JM_SOUGHT_3 1.0 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers Jason's rules should help you :- http://wiki.apache.org/spamassassin/SoughtRules Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import

Re: Need rule for this type of spam

2008-02-27 Thread --[ UxBoD ]--
please post the full message via something like pastebin. we need to see the headers aswell. Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID

Re: Hotmail DCC listed ???

2008-02-26 Thread --[ UxBoD ]--
we would need to see the full headers. Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone: [EMAIL

Re: Lots Of SPAM

2008-02-26 Thread --[ UxBoD ]--
Share Pictures and Chat SPAM 4.0 JM_SOUGHT_3JM_SOUGHT_3 4.0 JM_SOUGHT_2JM_SOUGHT_2 so take a look at http://wiki.apache.org/spamassassin/SoughtRules Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A

Re: Nice girl like to chat spam

2008-02-19 Thread --[ UxBoD ]--
Resolved. Cleared my sa-keys directory and re-imported them all. Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845

Re: telnet port 783 from external network

2008-02-19 Thread --[ UxBoD ]--
what does netstat -an | grep 783 show ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone

Re: Nice girl like to chat spam

2008-02-19 Thread --[ UxBoD ]--
it ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED] - Justin Mason

Re: Suggestions to block this spam

2008-02-19 Thread --[ UxBoD ]--
please post a URL to a sample message, or via pastebin so that we can run it through our installations and see what it hits. what is your SA installation hitting and scoring it as ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint

Re: flooded with jr* spam

2008-02-05 Thread --[ UxBoD ]--
the inline snort station should show some more detail. do you have access to your routers and switches ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver

Re: One SPAM that got through

2008-01-29 Thread --[ UxBoD ]--
- Matt Kettler [EMAIL PROTECTED] wrote: --[ UxBoD ]-- wrote: Hi, I just had this message get through :- snip and it only scored 5.6. These are the rules it hit :- 1.23 ADVANCE_FEE_2 0.00 BAYES_50 0.72 SARE_URGBIZ Contains urgent matter -0.00 SPF_PASS

One SPAM that got through

2008-01-28 Thread --[ UxBoD ]--
Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED] -- This message has been scanned

Re: How install spamassassin with vhcs2

2008-01-21 Thread --[ UxBoD ]--
/_Antivirus_filter -- Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED] -- This message has

Re: FuzzyOcr question

2008-01-14 Thread --[ UxBoD ]--
Is decoder (Chris) still developing FuzzyOCR ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone

Spam Scored zero ?

2008-01-11 Thread UxBoD
. Try to contact them as soon as possible to quicken the process of your Card before your Draft gets Expired. Let me know as soon as you receive your ATM Master Card. Thanks. Mr.tony okou -- Regards, --[ UxBoD ]-- // PGP Key: curl -s

Re: BOTNET 0.8 + SA 3.2.3

2008-01-11 Thread UxBoD
I am running it with SA 3.2.4 with no problems at all. Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP

Re: BOTNET 0.8 + SA 3.2.3

2008-01-09 Thread UxBoD
Do you see if get picked up if you run a lint on your SA installation ? Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44

Re: BOTNET 0.8 + SA 3.2.3

2008-01-09 Thread UxBoD
,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__TVD_BODY,__UNUSABLE_MSGID Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F

Re: Apache SpamAssassin 3.2.4

2008-01-07 Thread UxBoD
Is a RPM available for Centos5 yet ? Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: [EMAIL

Re: spamd throughput issues

2007-12-10 Thread UxBoD
would perhaps be useful to see a spamassassin -D --lint ? Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749

Re: MP3 Spam

2007-10-19 Thread UxBoD
Thanks Justin. Do they all follow the same patterns ? Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP

Re: MP3 Spam

2007-10-19 Thread UxBoD
, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED] - Original Message - From

Re: MP3 Spam

2007-10-19 Thread UxBoD
Can you post a copy online Martin ? need a few examples to find the common elements. Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B

MP3 Spam

2007-10-18 Thread UxBoD
Does anybody have one of these, or different one, that you could upload somewhere so can do some analysis ? Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver

Re: OT: The Funny Side of Spam

2007-10-03 Thread UxBoD
Well done Michele :) That is pure class. Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: [EMAIL

Re: lottery spam as .doc files

2007-08-09 Thread UxBoD
-2.3600 Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED] - Original

Re: Number spam (paranoid guess)

2007-08-07 Thread UxBoD
LOCAL_PROBE13 Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED

Re: Number spam (paranoid guess)

2007-08-07 Thread UxBoD
__LOCAL_DIG1 __LOCAL_DIG2 score LOCAL_DIG1 3 Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749

RBL Rules Question

2007-08-03 Thread UxBoD
the same if the IP address appears in both lists. How can I say on the meta rule that if it *only* appears in blacklist score -7, and 7 if in whitelist, and if in both use the yellowlist ? Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import

[RESOLVED] Re: RBL Rules Question

2007-08-03 Thread UxBoD
RCVD_IN_LRBL_Y net score RCVD_IN_LRBL_Y -3 Checked existing rules for help ;) Regards, --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver

PDFInfo

2007-07-13 Thread -- [ UxBoD ] --
How can I get the plugin? I have emailed the webmaster a couple of times but no response :( -- --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B

Re: Rulesemporium

2007-06-29 Thread -- [ UxBoD ] --
Same here :( On Fri, 29 Jun 2007 11:28:51 -0400, Joe Zitnik [EMAIL PROTECTED] wrote: Is it having troubles again? I'm having problems reaching the site. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- --[ UxBoD ]-- // PGP

Re: No buffer space available

2007-06-12 Thread -- [ UxBoD ] --
by MailScanner, and is believed to be clean. -- --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749 SIP Phone: [EMAIL

Re: Holding Spam in a webmail client

2007-06-04 Thread -- [ UxBoD ] --
a zero spam policy. If you believe this message to be spam, please contact [EMAIL PROTECTED] -- --[ UxBoD ]-- // PGP Key: curl -s https://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B // Keyserver: www.keyserver.net Key-ID

RE: Holding Spam in a webmail client

2007-06-04 Thread -- [ UxBoD ] --
www.empoweris.com 757-273-9399 (office) 757-715-1944 (cell) 866-477-1544 (toll free) -Original Message- From: --[ UxBoD ]-- [mailto:[EMAIL PROTECTED] Sent: Monday, June 04, 2007 3:26 PM To: Jason Holbrook Subject: RE: Holding Spam in a webmail client That is exactly what

Re: Holding Spam in a webmail client

2007-06-04 Thread -- [ UxBoD ] --
is quite old. --[ UxBoD ]-- wrote: Hi Jason, Yes it will work fine. A few minor tweaks are required so nothing major. Best thing is to join the mailwatch mailing list and introduce yourself :) Regards, On Mon, 4 Jun 2007 16:03:02 -0400, Jason Holbrook [EMAIL PROTECTED] wrote: I noticed

USER_IN_WHITELIST

2007-05-15 Thread -- [ UxBoD ] --
Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the variable is used but does not seem to get set anywhere ? -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8

Re: USER_IN_WHITELIST

2007-05-15 Thread -- [ UxBoD ] --
, Cedric BUSCHINI [EMAIL PROTECTED] wrote: --[ UxBoD ]-- a écrit : Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the variable is used but does not seem to get set anywhere ? Hi, Have a look in /usr/share/spamassassin. There is 60_whitelist.cf for rules and about

Re: USER_IN_WHITELIST

2007-05-15 Thread -- [ UxBoD ] --
the function eval:check_from_in_whitelist(), but need to see how that works. On Tue, 15 May 2007 10:48:47 +0200, Cedric BUSCHINI [EMAIL PROTECTED] wrote: ok - not the same problem I have is -100 too high for you ? --[ UxBoD ]-- a écrit : I have just performed a brand new server install

Re: USER_IN_WHITELIST

2007-05-15 Thread -- [ UxBoD ] --
Resolved :) Thanks. On Tue, 15 May 2007 10:48:47 +0200, Cedric BUSCHINI [EMAIL PROTECTED] wrote: ok - not the same problem I have is -100 too high for you ? --[ UxBoD ]-- a écrit : I have just performed a brand new server install with SA 3.2.0 and I noticed a email this morning that had

No Bayes or RBL Checks !

2007-05-12 Thread --[ UxBoD ]--
to no avail. -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 845 869 2749 // SIP Phone: [EMAIL PROTECTED] -- This message has

Re: No Bayes or RBL Checks !

2007-05-12 Thread --[ UxBoD ]--
Have just tested with GTUBE and even that does not get picked up! G. What is happening. My config lints fine. On Sat, 12 May 2007 07:35:14 +0100 --[ UxBoD ]-- [EMAIL PROTECTED] wrote: Hi, I am having real problems in getting SA 3.2.0 to perform Bayes or RBL checks. For some reason

Re: No Bayes or RBL Checks !

2007-05-12 Thread --[ UxBoD ]--
with --allowplugins, after removing the directory, and now the plugins get loaded. But yet again no checks are performed. Any ideas ? On Sat, 12 May 2007 08:44:53 +0100 --[ UxBoD ]-- [EMAIL PROTECTED] wrote: Have just tested with GTUBE and even that does not get picked up! G. What

Re: No Bayes or RBL Checks !

2007-05-12 Thread --[ UxBoD ]--
The point is that if I use either with or without plugins using the channel breaks SA 3.2.0. On Sat, 12 May 2007 15:25:23 -0400 Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: --[ UxBoD ]-- wrote: Eureka! Found the problem at last. It is down to the updates from saupdates.openprotect.com

Re: No Bayes or RBL Checks !

2007-05-12 Thread --[ UxBoD ]--
Using both though the channel update for openprotect seems to break it. Switched to rules-du-jour and all is okay now. On Sat, 12 May 2007 15:05:20 -0400 Theo Van Dinter [EMAIL PROTECTED] wrote: On Sat, May 12, 2007 at 09:04:22AM +0100, --[ UxBoD ]-- wrote: plugins were hashed out. I ran

Re: How to use SpamAssassin from PHP?

2007-05-09 Thread -- [ UxBoD ] --
is ending with \n)? regards, -- -- B.G. Mahesh http://www.greynium.com/ http://www.oneindia.in/ http://www.click.in/ - Free Indian Classifieds -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- --[ UxBoD ]-- // PGP Key

Re: How to use SpamAssassin from PHP?

2007-05-09 Thread -- [ UxBoD ] --
Regards, On Wed, 9 May 2007 10:22:55 +0100, --[ UxBoD ]-- [EMAIL PROTECTED] wrote: To ensure all is working okay, why not take a existing SPAM message and construct the $message from that and test ? On Wed, 9 May 2007 14:40:52 +0530, BG Mahesh [EMAIL PROTECTED] wrote: On 5/9/07, Duncan Hill

SA 3.2.0 and Bayes

2007-05-08 Thread -- [ UxBoD ] --
and that all looks fine. I have tested with a spam message and debug enabled and no errors are produced. Is there any additional debugging I can do ? TIA -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8

Re: SA 3.2.0 and Bayes

2007-05-08 Thread -- [ UxBoD ] --
Here is my lint :- SpamAssassin Lint[18703] dbg: logger: adding facilities: all0 [18703] dbg: logger: logging level is DBG 8E-05 [18703] dbg: generic: SpamAssassin version 3.2.03E-05 [18703] dbg: config: score set 0 chosen.0.00064 [18703] dbg: util: running in

SA-Compile Error

2007-05-06 Thread --[ UxBoD ]--
: Mail_SpamAssassin_CompiledRegexps_body_0_scan1 Any ideas on how to resolve it ? -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 845 869

Re: KAUF-TIPP DER WOCHE spam getting through

2007-03-28 Thread -- [ UxBoD ] --
to be clean. -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // SIP Phone: [EMAIL PROTECTED] -- This message has been scanned for viruses

Re: Big trouble

2007-03-28 Thread -- [ UxBoD ] --
-- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // SIP Phone: [EMAIL PROTECTED] -- This message has been scanned for viruses

RE: Big trouble

2007-03-28 Thread -- [ UxBoD ] --
If you wish to reject at MTA level then please read http://www.postfix.org/uce.html under the section Client hostname/address restrictions as you are able to specify a list of RBLs. Regards, UxBoD On Wed, 28 Mar 2007 12:20:16 +0200, Rocco Scappatura [EMAIL PROTECTED] wrote: What MTA are you

Re: Is Bayes Dead? Have the spammers won?

2007-03-23 Thread -- [ UxBoD ] --
it in the spam folders and they get learned. But the text in the image spam causes ham type text to be learned as spam. That causes ham to get higher scores. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- --[ UxBoD ]-- // PGP Key: curl

Re: Is overall spam volume down?

2007-02-04 Thread --[ UxBoD ]--
I only have a small installation but have seen a 50% increase in SPAM recently :( and a lot of it isn't be caught, even with splenty of rules and FuzzyOCR, due to them being very well worded emails :( :( On Sun, 04 Feb 2007 15:53:23 + Matt Richards [EMAIL PROTECTED] wrote: I would of

Drug Spam

2007-01-27 Thread --[ UxBoD ]--
Sorry for asking as I am sure that it has already been covered. But if there a rule for the new spate of drug SPAM where the URL has Remove * to make the link working! in it ? Thanks, -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be

Re: Drug Spam

2007-01-27 Thread --[ UxBoD ]--
On Sat, 27 Jan 2007 12:25:12 + Nigel Frankcom [EMAIL PROTECTED] wrote: On Sat, 27 Jan 2007 11:49:03 +, --[ UxBoD ]-- [EMAIL PROTECTED] wrote: Sorry for asking as I am sure that it has already been covered. But if there a rule for the new spate of drug SPAM where the URL has Remove

Re: Bayes

2007-01-26 Thread --[ UxBoD ]--
IMHO I would imagine that recently, due to the SPAM changes, that your Bayes has become poisoned. But I could be well wrong. On Fri, 26 Jan 2007 06:09:24 -0500 Jack Gostl [EMAIL PROTECTED] wrote: The amount of spam getting through my filters has been steadily increasing. From a start of under

Re: Should I use greylisting

2007-01-25 Thread --[ UxBoD ]--
Check out http://policyd.sourceforge.net/ then as it allows you to specify Servers/IP that should not be greylisted. Works very well. On Thu, 25 Jan 2007 12:33:19 - Matthew Bickerton [EMAIL PROTECTED] wrote: Hi, I am setting up a new server, so have a chance to make big changes to my

  1   2   >