[SAtalk] more spam since installing 2.60

Hi List. Is anyone else experiencing more junk mail getting through since installing 2.60? I am getting identical mails which score differently. Also, why are some scores in the tests 0.0? The mail below WAS tagged as spam but take a gander at the scores assisgned. The reason I am asking is tha

Re: [SAtalk] Re: Updated Corn

> On 11 Nov 2003, at 13:52, Jennifer Wheeler wrote: >> Popcorn Only - http://spamhammers.nxtek.net/popcorn.cf >> Backhair Only - http://spamhammers.nxtek.net/backhair.cf >> Weeds Only - http://spamhammers.nxtek.net/weeds.cf > > Why "Popcorn", "Backhair", and "Weeds"?? > > as opposed to "snarkle", "

Re: [SAtalk] Umlaut on subjects

Hello Leonardo, Sunday, November 9, 2003, 12:38:40 PM, you wrote: LHM> is there a way to block subjects with Umlauted Letters like: LHM> ö ü ä (sorry if it's messesd after mailing) LHM> How would a rule to get Umlauts in subject look like? LHM> /ISO?/ Does this work? header RM_sl_ForeignC

Re: [SAtalk] A black listing question

On 11/12/03 9:06 AM, "Satya" <[EMAIL PROTECTED]> wrote: (B (B> On Nov 11, 2003 at 13:17, Peter P. Benac wrote: (B> (B>>Is there a legitimate reason not to blacklist email.com? I just seem to (B>> get way too much SPAM from email.com. (B> (B> (B> Go ahead and block it. Collateral dam

RE: [SAtalk] SMTP gateway/filter

The preferred method is any way you prefer. ;) That is really an honest answer. Everyone has their own preferred method and a lot of times it depends on your specific situation. Some people will pipe to a filter shell script, Procmail, maildrop, or spamc directly. I prefer Procmail as it allows

RE: [SAtalk] Bounce all but whitelist

> -Original Message- > From: Tim Merkel [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 11, 2003 6:08 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Bounce all but whitelist > > > I have a client who wishes to only allow mail into his inbox > that is explicitly allowed via his whi

RE: [SAtalk] (semi)automatic Razor reporting options? anyone don e it like thi s before?

Yers, they started to charge for it. i ran the beta for a long time and was very happy with it, but i needed to do something with the server, not on everyone's outlook. looks like anti-spam software will go the way of the virus with signatures updates and anti-spam build into anti-virus software?

[SAtalk] Bounce all but white list

I have a client who wishes to only allow mail into his inbox that is explicitly allowed via his white list. Yahoo currently allows you to do this (which is where they got the idea). I currently host multiple domains using postfix virtual mailboxes with spamc/spamd (config files below). spamd is

[SAtalk] Comments on CBL DNSBL (cbl.abuseat.org)

Hi, Does anyone have any comments on the quality of the cbl.abuseat.org DNSBL? I noticed that it isn't used in SpamAssassin, but it is one of the black lists checked by spamcop. Is anyone else using this list? The purpose of the CBL is to list open proxies (of all types) which have been detected

[SAtalk] Re: Bounce all but whitelist

On 11 Nov 2003, at 16:07, Tim Merkel wrote: I have a client who wishes to only allow mail into his inbox that is explicitly allowed via his white list. Yahoo currently allows you to do this (which is where they got the idea). procmail -- This story shall the good man teach his son; And Crispin C

[SAtalk] Re: Updated Corn

On 11 Nov 2003, at 13:52, Jennifer Wheeler wrote: Popcorn Only - http://spamhammers.nxtek.net/popcorn.cf Backhair Only - http://spamhammers.nxtek.net/backhair.cf Weeds Only - http://spamhammers.nxtek.net/weeds.cf Why "Popcorn", "Backhair", and "Weeds"?? as opposed to "snarkle", "filgret", and "ash

[SAtalk] SMTP gateway/filter

I'm pretty new to spamassassin and I've only done a few spamassassin/postfix installations. My next task is to sett up some sort of STMP gateway that filters e-mail for spam and if approved, forwards the mail to "the real" mail server. The real mail server will probably be an exchange server but we

[SAtalk] Re: Okay, this one makes me mad.. anybody see or stop this one yet? How did this get through!!!!! ?????

On 11 Nov 2003, at 16:51, Robert Leonard III wrote: X-Spam-Level: *** X-Spam-Status: No, hits=7.1 required=9.5 tests=BAYES_50,FVGT_u_ODD_PORT, OACYS_CONS_6,OPTO_HEADER,OPT_HEADER,RCVD_IN_NJABL,RCVD_IN_SORBS, WEIRD_PORT version=2.60 You set your level at 9.0 and ask how it got through? You L

Re: [SAtalk] management GUI

--On Tuesday, November 11, 2003 4:51 PM -0800 Dan <[EMAIL PROTECTED]> wrote: > Does anyone have any suggestions on how I can add some better management > around spam that we have blocked, that we need to forward onto the users? > > a.) I have been given the direction that we are going to be tr

[SAtalk] Re: Filtering.

On 11 Nov 2003, at 10:31, Rajdeep Larha wrote: I have successfully installed the SA. but I am not able to filer the content. Any stuff which I want to filter in there in the rules directory but not getting filter. What I have to do with this? For e.g I have to filter the vulgar stuff. But it does

[SAtalk] Re: scoring system and values...

On 11 Nov 2003, at 12:17, Larry Gilson wrote: I don't know if this really fits in this subject or not. However, I keep thinking while reading this thread if anyone considers real opt-in advertisements/messages that get tagged by SA (like from OshKosh, Travelocity, Lands' End, etc.) to be a FP or

Re: [SAtalk] management GUI

On Tuesday, November 11, 2003, at 05:51 PM, Dan wrote: a.) I have been given the direction that we are going to be trapping all that we deem as spam and viruses. If we trap something that was not spam or a virus, we will forward it on to the end user after they call the help desk. (I don't over

[SAtalk] Re: Abused redirector URLs ?

On 11 Nov 2003, at 11:28, Matt Kettler wrote: At 11:47 AM 11/11/2003, Lukreme wrote: Quick (stupid) question. What is the best place to add rules where they will not get "blown away" via an upgrade? Right out of the rule-writing guide, section 1.2: I knew it was a stupid question when I asked it

Re: [SAtalk] Okay, this one makes me mad.. anybody see or stop this one yet? How did this get through!!!!! ?????

--On Tuesday, November 11, 2003 3:51 PM -0800 Robert Leonard III <[EMAIL PROTECTED]> wrote: > X-Spam-Level: *** > X-Spam-Status: No, hits=7.1 required=9.5 tests=BAYES_50,FVGT_u_ODD_PORT, > OACYS_CONS_6,OPTO_HEADER,OPT_HEADER,RCVD_IN_NJABL,RCVD_IN_SORBS, > WEIRD_PORT version=2.60 > X-Spam-Bay

Re: [SAtalk] Okay, this one makes me mad.. anybody see or stop this one yet? How did this get through!!!!! ?????

On Tue, Nov 11, 2003 at 03:51:37PM -0800, Robert Leonard III is rumored to have said: > > Okay, this one makes me mad.. anybody see or stop this one yet? How did > this get through! ? It didn't. You have your required hits set too high. > -- > > > X-AntiVir

[SAtalk] management GUI

Hey all! Ok, I have my mail gateway running: redhat 8 amavisd-new spamassassin sophos All seems good. I am trapping all spam and viruses in /var/virusmail (they are in .gz format) Does anyone have any suggestions on how I can add some better management around spam that we have blocked, that we n

[SAtalk] Okay, this one makes me mad.. anybody see or stop this one yet? How did this get through!!!!! ?????

Adieu. Home of mega penises! >> Magic is believing in yourself, if you can do that, you can make anything happen. 50.000 of gigant penises downloadable movies! >> Like the measles, love is most dangerous when it comes late in life. Hundreds of shocking mega cocks pictures. >> The reason there

Re: [SAtalk] A black listing question

On Nov 11, 2003 at 13:17, Peter P. Benac wrote: >Is there a legitimate reason not to blacklist email.com? I just seem to >get way too much SPAM from email.com. Go ahead and block it. Collateral damage? Good! That'll teach the people on the same domain as spammers. Block dynamic IPs, spam-fr

RE: [SAtalk] Bounce all but whitelist

I think challenge/response systems have no future, but if your clients insists on wanting that functionality, you might consider setting up TMDA for him and leaving everyone else on SpamAssassin. http://tmda.net/ - dan -- Dan Kohn -

[SAtalk] Bounce all but whitelist

I have a client who wishes to only allow mail into his inbox that is explicitly allowed via his white list. Yahoo currently allows you to do this (which is where they got the idea). I currently host multiple domains using postfix virtual mailboxes with spamc/spamd (config files below). spamd is

Re: [SAtalk] Comments on CBL DNSBL (cbl.abuseat.org)

On Tue, 11 Nov 2003, Paul Hutchings wrote: > Seems well regarded. > > I'm currently logging any hits to see if it's worth adding to my per user > DNSBLs that I use to reject mail to the people who get the most spam. > > The ones at http://abuse.easynet.nl are also well worth a look. Does anyone

[SAtalk] CPU Usage while sa-learning?

Hi, I have been initializing our Bayes databases after a system rebuild and 2.60 upgrade, and have noticed that feeding it very large mbox files causes some undesired behavior - namely an extremely high load of between 9 and 12. This load is rising even further during the course of sa-learn's exa

Re: [SAtalk] FROM_AND_TO_SAME Rule does not seem to work

On Tue, Nov 11, 2003 at 01:13:27PM -0800, Morris Jones wrote: > I think I solved this problem by removing my email address from the > AWL. No need for it to be in there. > > spamassassin --remove-addr-from-whitelist [EMAIL PROTECTED] The developers are still pondering it, however for me, the pat

Re: [SAtalk] New Spam Source? Rules for this yet??

Robert Leonard III wrote: I have been getting several new spams that seem to get past my SA setup.. So far they have come from: @name-james.com @name-clark.com @smegheads.com They all have wording like.. but with minor variations.. anybody else seeing these/written any rules to stop these?? Oh,

RE: [SAtalk] Filtering.

Hi Jennifer, I read your mail. But this is something little above it. There are certain words in 20_porn.cf. When I use only those words even then the rating given is too low. I used 5 words from the list in same case.. even then the mail was given only 1.4 points...Any idea? I can write my won rul

Re: [SAtalk] spamassasin without the mess

Hi, On Tue, 11 Nov 2003, Tyler Montbriand wrote: > Not having ever run a UNIX mail server, I find the existing > documentation and configuration info for spamassasin quite mystifying. > I'd prefer not to go with the UNIX method of handling mail and > mailboxes, and I certainly don't want it screw

Re: [SAtalk] Bayes versioning?

Rod Begbie <[EMAIL PROTECTED]> writes: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Ted Cabeen wrote: > >> I've got a site-wide bayes database that I'm not sure is correctly >> configured. It's quite a large database, and I think it may not have >> been converted to the new DB format whe

Re: [SAtalk] Bayes versioning?

Theo Van Dinter <[EMAIL PROTECTED]> writes: > On Tue, Nov 11, 2003 at 01:00:05PM -0800, Ted Cabeen wrote: >> I was running perl 5.005 back then, but I've upgraded to 5.8.1 now. >> Should I try running the import again? > > You might want to try that. The error you're reporting seems to occur > w

Re: [SAtalk] A black listing question

> "PPB" == Peter P Benac <[EMAIL PROTECTED]> writes: PPB> Is there a legitimate reason not to blacklist email.com? I just PPB> seem to get way too much SPAM from email.com. email.com (along with many others, such as mail.com) is hosted by outblaze. they have stated publicly that if any mail

Re: [SAtalk] FROM_AND_TO_SAME Rule does not seem to work

I think I solved this problem by removing my email address from the AWL. No need for it to be in there. spamassassin --remove-addr-from-whitelist [EMAIL PROTECTED] Mojo On Sun, 9 Nov 2003, Derek Jennings wrote: > > I have upgraded to 2.60 because this was driving me crazy in 2.55, but the >

RE: [SAtalk] [RD] Updated Corn

Darn it!!! Wget again Guenther. I'm sorry. I STILL didn't have the right Weeds set up there. It is right now. Wow... time to call it a day I think. :) Sorry for the trouble. > -Original Message- > From: guenther [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 11, 2003 4:14 PM > T

Re: [SAtalk] new to spamassassin

Hey guys! This works great! However, it seems to not throw a "SPAM" tag inot the logs but says content reject. Can that be changed at all? I want to write some shell scripts for reporting. Thanks Dan - Original Message - From: "Charles Gregory" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>

Re: [SAtalk] Bayes versioning?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ted Cabeen wrote: I've got a site-wide bayes database that I'm not sure is correctly configured. It's quite a large database, and I think it may not have been converted to the new DB format when I upgraded. When I try to run a sa-learn --dump magic,

Re: [SAtalk] Bayes versioning?

On Tue, Nov 11, 2003 at 01:00:05PM -0800, Ted Cabeen wrote: > I was running perl 5.005 back then, but I've upgraded to 5.8.1 now. > Should I try running the import again? You might want to try that. The error you're reporting seems to occur when the DB is not accessible, likely for writing. Sin

RE: [SAtalk] [RD] Updated Corn

Hi Guenther, > > Fresh popcorn if you would like some. I had one come through today > > (which I actually had anticipated, just had to figure out how to write > > the rule.) If you use this set, I'd update. It catches quite a lot more > > in the tag. > > Thanks for the update. :) My Pleasure!

Re: [SAtalk] Bayes versioning?

Theo Van Dinter <[EMAIL PROTECTED]> writes: > On Tue, Nov 11, 2003 at 12:36:54PM -0800, Ted Cabeen wrote: >> Here are the directory entries: >> -rw--- 1 amavisd amavisd 3148 Nov 11 12:29 bayes_journal >> -rw--- 1 amavisd amavisd 2652 Oct 1 10:36 bayes_msgcount >> -rw---

RE: [SAtalk] [RD] Updated Corn

> > > http://spamhammers.nxtek.net > > > > How are those files organized on that site? I couldn't find a link to > > the .cf files, so I just tried. Found popcorn.cf and weeds.cf but > > backhair.cf doesn't exist... > > I only linked the popcorn.cf on the site (as a temp download until Chris > S

RE: [SAtalk] scoring system and values...

Since we are a company, I don't get too hung up over these. I more worry about newsletters people get for their work. I usually just delete the "non-business" stuff, and don't run them as either spam or ham. <> | -Original Message- | From: Larry Gilson [mailto:[EMAIL PROTECTED] | Sent:

Re: [SAtalk] new to spamassassin

Sorry all, I jumped the gun. This does flag it as spam. Thanks Dan - Original Message - From: "Charles Gregory" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, November 11, 2003 11:59 AM Subject: [SAtalk] new to spamassassin > On Tue, 11 Nov 2003, Yackley, Matt wrote: > > Sc

[SAtalk] New Spam Source? Rules for this yet??

I have been getting several new spams that seem to get past my SA setup.. So far they have come from: @name-james.com @name-clark.com @smegheads.com They all have wording like.. but with minor variations.. anybody else seeing these/written any rules to stop these?? I pasted the headers at the

Re: [SAtalk] Bayes versioning?

On Tue, Nov 11, 2003 at 12:36:54PM -0800, Ted Cabeen wrote: > Here are the directory entries: > -rw--- 1 amavisd amavisd 3148 Nov 11 12:29 bayes_journal > -rw--- 1 amavisd amavisd 2652 Oct 1 10:36 bayes_msgcount > -rw--- 1 amavisd amavisd 41607168 Nov 11 12:29 bayes_se

[SAtalk] Bayes versioning?

I've got a site-wide bayes database that I'm not sure is correctly configured. It's quite a large database, and I think it may not have been converted to the new DB format when I upgraded. When I try to run a sa-learn --dump magic, I get the following output: Use of uninitialized value in numeri

RE: [SAtalk] A black listing question

Well now that you mention it!!! OK OK I guess I'll tweak the rules some more. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Matt Kettler > Sent: Tuesday, November 11, 2003 14:46 > To: [EMAIL PROTECTED]; 'SpamAssassin' > Subject: Re: [SAtalk]

[SAtalk] new to spamassassin

On Tue, 11 Nov 2003, Yackley, Matt wrote: > Scott, > This would probably be a little better & cleaner looking: > body LOCAL_SWEARWORD /\b(?:word1|word2|word3|word4)\b/i And in case anyone else unfamiliar with regex is wondering about that question mark followed by a colon - it is a special cod

Re: [SAtalk] [RD] Updated Corn

Hey Jennifer, > Fresh popcorn if you would like some. I had one come through today > (which I actually had anticipated, just had to figure out how to write > the rule.) If you use this set, I'd update. It catches quite a lot more > in the tag. Thanks for the update. :) > http://spamhammers.nx

RE: [SAtalk] Filtering.

Hi Rajdeep, > I have successfully installed the SA. but I am not able to filer the > content. Any stuff which I want to filter in there in the rules directory > but not getting filter. What I have to do with this? > For e.g I have to filter the vulgar stuff. But it does not filterit. My > local.c

Re: [SAtalk] A black listing question

At 01:17 PM 11/11/2003, Peter P. Benac wrote: Is there a legitimate reason not to blacklist email.com? I just seem to get way too much SPAM from email.com. It's a real webmail type service.. So the same arguments that apply for why you should/should not block hotmail, yahoo, eudoramail, and o

[SAtalk] RD: Random Text Rules

Just tossing this out as an idea . . . I have been working on the random text strings. I have talked about this a little before but only really had one rule. I have started looking at consonant-vowel-consonant combinations rather than just the long consonant strings. I checked these combination

RE: [SAtalk] [RD] simple rule for consumption

Regis, I had several false positives today based on the BAD_X_HEADERS rule. I'm using the rules from Chris' site (Nov02). The legitimate emails had an "X-URL" header. All of the FPs where from a single mailing list. For what ever reason, they are providing a valid link to some content within th

Re: [SAtalk] SpamAssassin dont block the default sample spam examples and others

At 01:19 PM 11/11/2003, Joao Pedro wrote: I'm installing a Spam Gateway Email Server in a FreeBSD server with Postfix+Amavisd+SpamAssassin and a followed this howto http://lawmonkey.org/anti-spam.html. All it's appear ok, but when I send a email with the sample_spam.txt or other spam example file t

RE: [SAtalk] [RD] new to spamassassin

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Scott Harris > > > > I have a regex type question, I think, about local examples > like the on above. Can you put multiple words on a single check > such as: > > Body LOCAL_SWEARWORD1

RE: [SAtalk] scoring system and values...

I don't know if this really fits in this subject or not. However, I keep thinking while reading this thread if anyone considers real opt-in advertisements/messages that get tagged by SA (like from OshKosh, Travelocity, Lands' End, etc.) to be a FP or not. Do site-wide Bayes installs have a hard t

[SAtalk] spamassasin without the mess

Not having ever run a UNIX mail server, I find the existing documentation and configuration info for spamassasin quite mystifying. I'd prefer not to go with the UNIX method of handling mail and mailboxes, and I certainly don't want it screwing with my ISP's smtp server. I'd like to just cut ou

RE: [SAtalk] spamassasin without the mess

You've just described how spamassassin works. So I'm pretty certain the you don't want to sit at a command line, saving your mails to text files, and checking them one-by-one. What is it that you would LIKE to do, really? Chances are someone's already doing it. Do you have a non-*n?x enterprise

Re: [SAtalk] Re: Abused redirector URLs ?

On Tue, 11 Nov 2003, Lukreme wrote: > > uri YAHOO_REDIR /srd.yahoo.com\/drst\/.*\*http:/ > > Quick (stupid) question. What is the best place to add rules where > they will not get "blown away" via an upgrade? Give a go at putting it in /etc/mail/spamassassin/local.cf -- that's where I

[SAtalk] Re: new to spamassassin

Dan <[EMAIL PROTECTED]> wrote: > 1. I know spamassassin works on a point system, but does it learn as > time goes by? sa-learn (Bayes) > 2. My compnay wants to block all swears (dont ask me why!) How can > this be done? A really, REALLY bad idea. Part of a good system admin's job is convincing

RE: [SAtalk] new to spamassassin

> > >2. My compnay wants to block all swears (dont ask me why!) > How can this > >be done? > > Write some custom rules with high scores: > > bodyLOCAL_SWEARWORD1/\bf***\b/i > score LOCAL_SWEARWORD1 10.0 > > Substitute f*** for your favorite swear word.. Be sure to > frame you

Re: [SAtalk] Re: Abused redirector URLs ?

At 11:47 AM 11/11/2003, Lukreme wrote: Quick (stupid) question. What is the best place to add rules where they will not get "blown away" via an upgrade? Right out of the rule-writing guide, section 1.2: /etc/mail/spamassassin/local.cf is the place of choice for site-wide application

Re: [SAtalk] Filtering.

At 12:31 PM 11/11/2003, Rajdeep Larha wrote: I have successfully installed the SA. but I am not able to filer the content. Any stuff which I want to filter in there in the rules directory but not getting filter. Um what do you mean by "Any stuff which I want to filter in there in the rules direc

RE: [SAtalk] A black listing question

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Peter P. Benac > Sent: Tuesday, November 11, 2003 12:17 PM > To: 'SpamAssassin' > Subject: [SAtalk] A black listing question > > Greetings, > > Is there a legitimate reason not to blacklist

Re: [SAtalk] What Dynamic IPs rbl list?

- Original Message - From: "Bill" <[EMAIL PROTECTED]> To: "'Marcio Merlone'" <[EMAIL PROTECTED]>; "'SA List'" <[EMAIL PROTECTED]> Sent: Tuesday, November 11, 2003 5:19 PM Subject: RE: [SAtalk] What Dynamic IPs rbl list? > > The intention is to disallow any adsl, dial-up or > > dynamic/st

Re: [SAtalk] [MailServer Notification]To recipient: Message matched eManager setting and action was taken.

At 03:45 AM 11/11/2003, David B Funk wrote: On Mon, 10 Nov 2003 [EMAIL PROTECTED] wrote: > eManager Notification * > > The following mail was blocked since it contains sensitive content. Love the stupid -PC- double-talk here. Gee, what was the content sensitive to?

RE: [SAtalk] (semi)automatic Razor reporting options? anyone don e it like thi s before?

Chip Paswater wrote: > > If you use Windows and Outlook, try Cloudmark's Spamnet product. It's > the commercial version of razor, and feeds the same backend database. > > I think it's still free to use. http://www.cloudmark.com No it's not free (subscription is $1.99 a month or something) but th

Re: [SAtalk] (semi)automatic Razor reporting options? anyone don e it like thi s before?

If you use Windows and Outlook, try Cloudmark's Spamnet product. It's the commercial version of razor, and feeds the same backend database. I think it's still free to use. http://www.cloudmark.com As far as looking up status, there's no official way to do it. You could create a unique message,

RE: [SAtalk] A black listing question

just the obious answer, if someone who has a legitimate account there tries to send you email it will get flagged as spam.. > -Original Message- > From: Peter P. Benac [mailto:[EMAIL PROTECTED] > Sent: 11 November 2003 18:17 > To: 'SpamAssassin' > Subject: [SAtalk] A black listing question

[SAtalk] A black listing question

Greetings, Is there a legitimate reason not to blacklist email.com? I just seem to get way too much SPAM from email.com. Regards, Pete Peter P. Benac, CCNA Emacolet Networking Services, Inc Providing Systems and Network Consulting, Training, Web Hosting Services Phone: 919-847-1740 or 8

Re: [SAtalk] new to spamassassin

At 12:58 PM 11/11/2003, Dan wrote: 1. I know spamassassin works on a point system, but does it learn as time goes by? IF you use the bayes subsystem, which is on by default but untrained as well, SA will engage in some automatic learning for the bayes rules. The remaining rules are static ones, a

Re: [SAtalk] What Dynamic IPs rbl list?

On Tue, 11 Nov 2003 13:04:46 -0500 "Bill" <[EMAIL PROTECTED]> wrote: > > I want to block those selling [EMAIL PROTECTED]@, asian porn, and such > > un-wanted material, which represents about 50% of the traffic > > (pure guess). There will be some spam that will then be > > easaly downloaded by

[SAtalk] SpamAssassin dont block the default sample spam examples and others

Hi there, I'm installing a Spam Gateway Email Server in a FreeBSD server with Postfix+Amavisd+SpamAssassin and a followed this howto http://lawmonkey.org/anti-spam.html. All it's appear ok, but when I send a email with the sample_spam.txt or other spam example file to a external email or send fro

Re: [SAtalk] What Dynamic IPs rbl list?

On Tue, 11 Nov 2003 12:29:27 -0500 Matt Kettler <[EMAIL PROTECTED]> wrote: > At 11:00 AM 11/11/2003, Bill wrote: > >Bad, bad, bad idea!!! > Bad, bad, bad assumption! :) LOL Matt is right. I will block just direct-delivery. :) -- Marcio Merlone

Re: [SAtalk] new to spamassassin

--On Tuesday, November 11, 2003 9:58 AM -0800 Dan <[EMAIL PROTECTED]> wrote: > 1. I know spamassassin works on a point system, but does it learn as time > goes by? See the topics on SpamAssassin's Learn Feature. You'll need to feed it ham and spam for it to learn. > 2. My compnay wants to block

[SAtalk] Filtering.

I have successfully installed the SA. but I am not able to filer the content. Any stuff which I want to filter in there in the rules directory but not getting filter. What I have to do with this? For e.g I have to filter the vulgar stuff. But it does not filterit. My local.cf is as follows:- # Sp

RE: [SAtalk] What Dynamic IPs rbl list?

> I want to block those selling [EMAIL PROTECTED]@, asian porn, and such > un-wanted material, which represents about 50% of the traffic > (pure guess). There will be some spam that will then be > easaly downloaded by our customers and then filtered. Again, I feel deleting ANY mail addressed to

[SAtalk] Re: Comments on CBL DNSBL (cbl.abuseat.org)

On 11 Nov 2003, at 10:09, Robert James Kaes wrote: Hi, Does anyone have any comments on the quality of the cbl.abuseat.org DNSBL? I noticed that it isn't used in SpamAssassin, but it is one of the black lists checked by spamcop. Is anyone else using this list? I use it a the postfix level to reje

RE: [SAtalk] What Dynamic IPs rbl list?

At 11:00 AM 11/11/2003, Bill wrote: Bad, bad, bad idea!!! There are many many people running home networks in dynamic space who send their mail thru their isp server. These will all get caught and trashed by your plan. You better have a VERY good explanation why you just alienated hundreds of curr

RE: [SAtalk] Comments on CBL DNSBL (cbl.abuseat.org)

Seems well regarded. I'm currently logging any hits to see if it's worth adding to my per user DNSBLs that I use to reject mail to the people who get the most spam. The ones at http://abuse.easynet.nl are also well worth a look. regards, Paul > -Original Message- > From: Robert James Ka

Re: [SAtalk] Re: Trouble restarting spamd

You need to wait for all of spamd's children to die, including all of the spamc's. This can take a while on a busy and/or slow server. This works for me most of the time: #!/bin/bash PID=`awk '{print $1}' /var/run/spamd.pid` kill -TERM $PID && wait || echo "ERROR!" /usr/local/etc/rc.d/sp

[SAtalk] Comments on CBL DNSBL (cbl.abuseat.org)

Hi, Does anyone have any comments on the quality of the cbl.abuseat.org DNSBL? I noticed that it isn't used in SpamAssassin, but it is one of the black lists checked by spamcop. Is anyone else using this list? The purpose of the CBL is to list open proxies (of all types) which have been detected

[SAtalk] Re: What Dynamic IPs rbl list?

On 11 Nov 2003, at 07:30, Marcio Merlone wrote: I was wondering what rbl lists you guys use to block dynamic IP ranges. I will use it on a gateway relay-only server, which makes anti-virus and anti-spam and then forwards messages to end server. It's a postfix box. reject_rbl_client cbl.abuseat.or

Re: [SAtalk] What Dynamic IPs rbl list?

On Tue, 11 Nov 2003 11:00:00 -0500 "Bill" <[EMAIL PROTECTED]> wrote: > > The intention is to disallow any adsl, dial-up or > > dynamic/static address on such lines to send any mail to this > > server. I will have a separated smtp server for my customers... ;) > > Bad, bad, bad idea!!! > > Ther

[SAtalk] Re: Abused redirector URLs ?

On 06 Nov 2003, at 20:26, Keith C. Ivey wrote: Chr. von Stuckrad <[EMAIL PROTECTED]> wrote: I created the following rule for them # Special abused yahoo-redirector uri YAHOO_REDIR /srd.yahoo.com\/drst\/illuminating\/\*http:/ score YAHOO_REDIR 2 describe YAHOO_REDIRcontains url of

[SAtalk] new to spamassassin

Good morning guys! Im new to spamassassin. I have it set up on a redhat 8 box with sophos and amavisd-new. It seem to be working out of the box but I have a few questions. (Maybe someone can point me to some docs?) 1. I know spamassassin works on a point system, but does it learn as time goes by

[SAtalk] Another question re: Spam Assassin and SQL

Hello I think I figured something out, and I just want to confirm: Am I correct in understanding now that the SQL user preferences system only works when you run Spam Assassin through Procmail? Can it be set up to run from the Spamass-Milter? Thanks. Tim -

Re: [SAtalk] [MailServer Notification]To recipient: Message matched eManager setting and action was taken.

On 11 Nov 2003, at 01:45, David B Funk wrote: On Mon, 10 Nov 2003 [EMAIL PROTECTED] wrote: The following mail was blocked since it contains sensitive content. Love the stupid -PC- double-talk here. Gee, what was the content sensitive to? (is it sensitve to light, heat, shock...) Stupidity, of cours

RE: [SAtalk] scoring system and values...

I use Bayes for site-wide and love it. I have a recipe in my Procmail to grab any message that scores between 6 and 10, and store it in a "suspect" MBOX. Once a week I look through this for false positives and move to a "ConfirmedHam" MBOX, and move the rest to "ConfirmedSPAM" MBOX. I look at th

RE: [SAtalk] What Dynamic IPs rbl list?

> The intention is to disallow any adsl, dial-up or > dynamic/static address on such lines to send any mail to this > server. I will have a separated smtp server for my customers... ;) Bad, bad, bad idea!!! There are many many people running home networks in dynamic space who send their mail th

Re: [SAtalk] spamassassin

Maximo Lopez wrote: hello ther I already install the spamassassing , I use the automatic way "cpan", then I modify the procmail as the example http://spamassassin.org/dist/procmailrc.example, but I still receive Spam , what should I check ??? regards The procmailrc.example uses 'spamc', the

Re: [SAtalk] html mails getting through

At 04:56 AM 11/11/2003, Thomas Kinghorn wrote: I have attached a spam i keep getting, no, you've quoted it in text-only form without all the headers... All I can tell from what you posted is it's using bayes poison.. There's no way from that little snippet to see what rules the email matched. Fo

Re: [SAtalk] What Dynamic IPs rbl list?

At 09:30 AM 11/11/2003, Marcio Merlone wrote: I was wondering what rbl lists you guys use to block dynamic IP ranges. I will use it on a gateway relay-only server, which makes anti-virus and anti-spam and then forwards messages to end server. It's a postfix box. dynablock seems to work pretty well

RE: [SAtalk] html mails getting through

> > Hi list. > > I have attached a spam i keep getting, from different senders. > This keeps getting through and I cannot find a way to deny it. *snip* > > Regards, > Tom Kinghorn It seems to be plain text, not HTML. It has the yahoo redirect that has been discussed recently. There is a rule

Re: [SAtalk] ok_locales

At 06:07 AM 11/11/2003, Sergey V. Baldin wrote: How to activate localization: "ok_locales on|off"? It's not an on/off thing, you need to pick a list of locales that are ok.. The current list of locales is: en - Western character sets in general ja - Japanese character set

Re: [SAtalk] What Dynamic IPs rbl list?

I use dialups.visi.com and dynablock.easynet.nl. - Original Message - From: "Marcio Merlone" <[EMAIL PROTECTED]> To: "SA List" <[EMAIL PROTECTED]> Sent: Tuesday, November 11, 2003 9:30 AM Subject: [SAtalk] What Dynamic IPs rbl list? > Hello! > > I was wondering what rbl lists you guys

Re: [SAtalk] Problem while configuring Spamassassin

and what happens when you run spamd -D from the command line? Rajdeep Larha wrote: I installed SpamAssassin as per the documentations available at the spamassassin.org. I instaleld all the dependent modules and it installed fine w/o any error, I checked and verified using the command listed in

[SAtalk] What Dynamic IPs rbl list?

Hello! I was wondering what rbl lists you guys use to block dynamic IP ranges. I will use it on a gateway relay-only server, which makes anti-virus and anti-spam and then forwards messages to end server. It's a postfix box. The intention is to disallow any adsl, dial-up or dynamic/static address

[SAtalk] SA & MimeDefang

Does anyone know of a good (complete) Administration how-to that covers SpamAssassin called via MimeDefang working with Sendmail? I've got it all up and running, but I get the feeling I'm really missing the tuning and maintenance part of the equation. --- An insult from an idiot is equal to a

  1   2   >