Re: [users] Clash of 2 SPF packages

2007-10-04 Thread Nigel Frankcom
On Thu, 4 Oct 2007 19:43:00 +0200 (CEST), Dag Wieers <[EMAIL PROTECTED]> wrote: >On Thu, 4 Oct 2007, Hugo van der Kooij wrote: > >> On Thu, 4 Oct 2007, Dag Wieers wrote: >> >> > That said, I wouldn't mind removing spfquery from one of the packages in >> > order to allow both packages to be co-inst

Switching from local delivery to relay for Exchange?

2007-10-04 Thread Henry Kwan
Hi, I'm currently running SA 3.23 on a CentOS 4.5 with sendmail-8.13 box and it's happily filtered spam for a few years now. But we are now looking into acquiring an Exchange server so I was wondering if I can switch from local delivery of mail to relaying it downstream to the Exchange server.

Re: Why'd Botnet hit?

2007-10-04 Thread bgodette
$host 216.117.166.139 139.166.117.216.in-addr.arpa domain name pointer nameservices.net. $host nameservices.net nameservices.net has address 216.117.191.6 nameservices.net mail is handled by 10 mail.nameservices.net. $host mail.nameservices.net. mail.nameservices.net has address 216.117.159.238 Re

RE: FW: {Spam? Craig} Symantec Mail Security detected that you sent a message with an unscannable attachment or body(SYM:37368083501226969515)

2007-10-04 Thread Dan Barker
Received: from craig.dweezil.us [65.105.39.117] by mail.visioncomm.net with ESMTP (SMTPD32-8.15) id AA871C9F0088; Thu, 04 Oct 2007 15:09:59 -0400 Mike: I'm behind mail.visioncomm.net (the top received header). dweezil.us is generated that bounce when I posted to the list. The returned info is n

Re: FW: {Spam? Craig} Symantec Mail Security detected that you sent a message with an unscannable attachment or body(SYM:37368083501226969515)

2007-10-04 Thread Mike Jackson
Anyone else getting these when they post? Check the Received headers. There's no server that doesn't have a dweezil.us hostname. It never left your network.

FW: {Spam? Craig} Symantec Mail Security detected that you sent a message with an unscannable attachment or body(SYM:37368083501226969515)

2007-10-04 Thread Dan Barker
Anyone else getting these when they post? Dan -Original Message- (watch the wrap) Received: from craig.dweezil.us [65.105.39.117] by mail.visioncomm.net with ESMTP (SMTPD32-8.15) id AA871C9F0088; Thu, 04 Oct 2007 15:09:59 -0400 Received: from titan.dweezil.us (titan.dweezil.us [65.105.

Why'd Botnet hit?

2007-10-04 Thread Dan Barker
I got a message that begins: Received: from ccdnc.net [216.117.166.139] by mail.visioncomm.net with ESMTP (SMTPD32-8.15) id A3F2105A0058; Thu, 04 Oct 2007 14:41:54 -0400 Received: from President [74.168.150.234] by ccdnc.net with ESMTP (SMTPD32-8.00) id A56C5201EE; Thu, 04 Oct 2007 14:48:12 -0

where does include include from?

2007-10-04 Thread Per Jessen
I have spamd running with --nouser-config --virtual-config-dir= When scanning, it'll pick up 'user_prefs' from , but when I have an 'include ' in user_prefs, where will it look for ? /Per Jessen, Zürich

RE: OT: The Funny Side of Spam

2007-10-04 Thread Michele Neylon :: Blacknight
UxBoD wrote: > Well done Michele :) That is pure class. > :) Some of the comments on my blog are hilarious ... Mr Michele Neylon Blacknight Solutions Hosting & Colocation, Brand Protection http://www.blacknight.eu/ http://blog.blacknight.eu/ Intl. +353 (0) 59 9183072 Locall: 1850 929 929 Dire

Re: Robert Sexton filter

2007-10-04 Thread Arthur Dent
On Wed, Oct 03, 2007 at 12:39:29PM -0400, Theo Van Dinter wrote: > On Tue, Oct 02, 2007 at 06:09:11PM -0500, Steven Stern wrote: > > >> Does anyone have a rule handy that would replace my "blacklist_from" > > >> entries with something more versatile? > > > > > > Such as? You can match all of the