Looking for list of bank domains

2009-03-30 Thread Marc Perkel
I'd like to get a more complete list of banks or bank like institutions and sites where hackers are trying to steal passwords to log into people's accounts. Here's my small list. Like to get more. I might set up an rbldns list of banks if this works out. 2checkout.com 2co.com abbey.com

Re: Looking for list of bank domains

2009-03-30 Thread Matt Garretson
Marc Perkel wrote: I'd like to get a more complete list of banks or bank like institutions and sites where hackers are trying to steal passwords to log into people's accounts. Here's my small list. Like to get more. I might set What about webmail sites that people phish for? And social

Re: Looking for list of bank domains

2009-03-30 Thread Marc Perkel
Matt Garretson wrote: Marc Perkel wrote: I'd like to get a more complete list of banks or bank like institutions and sites where hackers are trying to steal passwords to log into people's accounts. Here's my small list. Like to get more. I might set What about webmail sites that

Re: spamassassin: Determining last sa-update

2009-03-30 Thread Matus UHLAR - fantomas
On 27.03.09 19:13, Dennis German wrote: I believe this is another cPanel issue. then, post this to cpanel group, not here. Attempting to run sa-update displays: mkdir /etc/mail: Permission denied at /usr/bin/sa-update line 1226 How can I determine that last time sa-update was run?

Re: Looking for list of bank domains

2009-03-30 Thread Henrik K
On Mon, Mar 30, 2009 at 07:40:50AM -0700, Marc Perkel wrote: I'd like to get a more complete list of banks or bank like institutions and sites where hackers are trying to steal passwords to log into people's accounts. Here's my small list. Like to get more. I might set up an rbldns list

Re: Looking for list of bank domains

2009-03-30 Thread Joseph Brennan
--On Monday, March 30, 2009 8:07 -0700 Marc Perkel m...@perkel.com wrote: Actually such a list might be a good idea. A list of sites people phish for. The rule is as follows. If the from domain is on the list then that domain has to also appear somewhere in the received lines or it's spam. I

Re: sa-update: determining last run

2009-03-30 Thread McDonald, Dan
On Sun, 2009-03-29 at 17:41 -0400, Dennis G German wrote: Is there a way I can determine when sa-update was last run? Asumming you are running 3.2.5, then: $ ls -l /var/lib/spamassassin/3.002005/updates_spamassassin_org.cf will tell you the date it last updated the rules $ head -1

Pastebin for spam examples

2009-03-30 Thread Kenneth Porter
--On Saturday, March 28, 2009 3:32 PM -0700 RobertH robe...@abbacomm.net wrote: pastebin said the headers tripped the spam filter so i have to post this way... I've seen this complaint before. Perhaps SA or one of the other anti-spam websites could host a pastebin for spam examples, that

Re: New kind of spam

2009-03-30 Thread Benny Pedersen
On Wed, March 25, 2009 17:59, Arvid Ephraim Picciani wrote: http://codepad.org/W53onqK9 listed in ZEN, and helo with non fqdn helo i gave on this kind of spam. its impossible to train bayes no its not and changing to fast to make custom rules. use rules that catch on non fqdn would be a

Re:

2009-03-30 Thread Benny Pedersen
On Wed, March 25, 2009 02:45, jcput...@mail.centreweb.co.za wrote: Can spamassassin miss hits or rules if it is running on a slow machine? no its just takes longer, but out of mem is problem make sure you not using swap, then it should be ok -- http://localhost/ 100% uptime and 100%

RFC's suck

2009-03-30 Thread Kenneth Porter
This video was recently posted to the MIMEDefang list, and illustrates how bad the RFC's for mail format are. No wonder SA has such trouble deciding what's spam and what's legitimate. NOTHING is legitimate, due to problems with the standards. (And this doesn't even discuss SMTP, just the format

Re: RFC's suck

2009-03-30 Thread Rik
On Mon, 2009-03-30 at 10:32 -0700, Kenneth Porter wrote: This video was recently posted to the MIMEDefang list, and illustrates how bad the RFC's for mail format are. No wonder SA has such trouble deciding what's spam and what's legitimate. NOTHING is legitimate, due to problems with the

Re: sa-update: determining last run? Not in /var/lib/spamassassin

2009-03-30 Thread RWS*
Thanks very much. Bad assumption (on my part too) ! spamassassin --version SpamAssassin version 3.2.4 Gawk ls -l /var/lib/spamassassin drwxr-xr-x 3 4096 Oct 16 18:27 compiled/3.002004 ... does not contain any .cf files! ls -l /var/lib/spamassassin/compiled/3.002004/

Re: RFC's suck

2009-03-30 Thread Kenneth Porter
--On Monday, March 30, 2009 7:52 PM +0100 Rik hlug090...@buzzhost.co.uk wrote: The MAIL RFC's were conceives a long time ago and have had some changes. Sure - the mail system is not ideal - however, with no RFC's we would end up with closed, stupid proprietary systems that don't talk.

Re: Pastebin for spam examples

2009-03-30 Thread LuKreme
On 30-Mar-2009, at 11:24, Kenneth Porter wrote: --On Saturday, March 28, 2009 3:32 PM -0700 RobertH robe...@abbacomm.net wrote: pastebin said the headers tripped the spam filter so i have to post this way... I've seen this complaint before. Perhaps SA or one of the other anti- spam

Re: RFC's suck

2009-03-30 Thread LuKreme
On 30-Mar-2009, at 11:52, Rik wrote: The MAIL RFC's were conceives a long time ago and have had some changes. The changes (RFC2822) did not change enough. What is really needed is SoSMTP (Son of SMTP) defined for port 26. It would be 8bit compatible and would NOT be backward compatible

Re: Pastebin for spam examples

2009-03-30 Thread Karsten Bräckelmann
On Mon, 2009-03-30 at 10:24 -0700, Kenneth Porter wrote: pastebin said the headers tripped the spam filter so i have to post this way... I've seen this complaint before. Perhaps SA or one of the other anti-spam websites could host a pastebin for spam examples, that explicitly does NOT

Re: New kind of spam

2009-03-30 Thread Martin Gregorie
On Mon, 2009-03-30 at 19:26 +0200, Benny Pedersen wrote: On Wed, March 25, 2009 17:59, Arvid Ephraim Picciani wrote: http://codepad.org/W53onqK9 and changing to fast to make custom rules. use rules that catch on non fqdn would be a pointer I have a rule I wrote a few months ago that

Re: Pastebin for spam examples

2009-03-30 Thread Rob McEwen
Karsten Bräckelmann wrote: This won't work out. It's how it used to be... There's a reason, pastebins (just like URL shortener services) are implementing spam filtering and various other spam/bulk counter- measures. That's because they have been abused by spammers. Creating a dump to put

Re: sa-update: determining last run? Not in /var/lib/spamassassin

2009-03-30 Thread Daniel J McDonald
On Mon, 2009-03-30 at 14:23 -0400, RWS* wrote: Thanks very much. Bad assumption (on my part too) ! spamassassin --version SpamAssassin version 3.2.4 Gawk ls -l /var/lib/spamassassin drwxr-xr-x 3 4096 Oct 16 18:27 compiled/3.002004 ... does not contain any .cf

Re: Pastebin for spam examples

2009-03-30 Thread Karsten Bräckelmann
On Mon, 2009-03-30 at 17:24 -0400, Rob McEwen wrote: Karsten Bräckelmann wrote: There's a reason, pastebins (just like URL shortener services) are implementing spam filtering and various other spam/bulk counter- measures. That's because they have been abused by spammers. It seems like a

RE: sa-update: determining last run? Not in /var/lib/spamassassin

2009-03-30 Thread Dennis G German
spamassassin --version SpamAssassin version 3.2.4 ls -l /var/lib/spamassassin drwxr-xr-x 3 4096 Oct 16 18:27 compiled/3.002004 ... The ONLY directory under /var/lib/spamassassin is compiled and it does not contain any .cf files, nor do any of the subdirectories PS Sorry

RE: update overkill (was: help lowering score on a specific emaillist situation)

2009-03-30 Thread Karsten Bräckelmann
On Sun, 2009-03-29 at 13:55 -0700, RobertH wrote: Previously, Karsten Bräckelmann wrote: The most part of this discussion isn't specific to you, nor SA. It's a well-known, general problem when running update services. It isn't meant to be a decree either, it's partly my opinion,

Re: New kind of spam

2009-03-30 Thread Jeff Mincy
From: Arvid Ephraim Picciani a...@exys.org Date: Wed, 25 Mar 2009 16:59:58 +0100 http://codepad.org/W53onqK9 i gave on this kind of spam. its impossible to train bayes and changing to fast to make custom rules. ... What do you mean its impossible to train bayes? Bayes

Re: RFC's suck

2009-03-30 Thread Kenneth Porter
On Monday, March 30, 2009 2:13 PM -0600 LuKreme krem...@kreme.com wrote: The changes (RFC2822) did not change enough. What is really needed is SoSMTP (Son of SMTP) defined for port 26. It would be 8bit compatible and would NOT be backward compatible with current SMTP. It would not have

Re: Pastebin for spam examples

2009-03-30 Thread Kenneth Porter
On Monday, March 30, 2009 10:15 PM +0200 KarstenBräckelmann guent...@rudersport.de wrote: There's a reason, pastebins (just like URL shortener services) are implementing spam filtering and various other spam/bulk counter- measures. That's because they have been abused by spammers. Creating a

Re: Pastebin for spam examples

2009-03-30 Thread Matt Kettler
Kenneth Porter wrote: On Monday, March 30, 2009 10:15 PM +0200 KarstenBräckelmann guent...@rudersport.de wrote: There's a reason, pastebins (just like URL shortener services) are implementing spam filtering and various other spam/bulk counter- measures. That's because they have been abused