RE: Understanding the hostKarma Lists

marc dont forget this one http://wiki.apache.org/spamassassin/MarcPerkelsExperiments - rh _ From: Marc Perkel [mailto:m...@perkel.com] snip Yes - the wiki is updated.

Re: Hostkarma: to be or not to be in SA defaults

Hi Marc, At 09:32 30-09-2009, Marc Perkel wrote: I have a lot of mighty servers set up ad have servers at 4 locations. I have 50mb bought and using about 30 of it now. I am not sure what it takes to support a default SA inclusion. Does anyone know if what I described sounds like it is enough?

.cn Oddity

uri T_CN_URL /[^\/]+\.cn(?:$|\/|\?)/i describe T_CN_URL Contains a URL in the .cn domain uri T_CN_8_URL /[\/.]+\w{8}\.cn(?:$|\/|\?)/i describe T_CN_8_URL Contains a URL in the .cn domain of exactly 8 characters long http://ruleqa.spamassassin.org/20090930-r820211-n/T_CN_URL/detail

Re: Understanding the hostKarma Lists

Blaine Fleming wrote: Marc Perkel wrote: I like it. RCVD_IN_HOSTKARMA_BL RCVD_IN_HOSTKARMA_WL RCVD_IN_HOSTKARMA_YL RCVD_IN_HOSTKARMA_BR Let's go with it. Marc, have you updated your wiki to reflect the new rules? I think that will pretty well settle any debate or qu

Re: DNSWL and JMF White false positives, what to do exactly?

On Wed, 2009-09-30 at 23:35 +0200, mouss wrote: > Warren Togami wrote: > > I scanned my spam folders and found a few false positives that hit on > > either DNSWL > > FP with DNSWL? > > FP = False Positive = legitimaite mail tagged as spam > DNSWL = Whitelist False positive. Something, that

Re: DNSWL and JMF White false positives, what to do exactly?

On Wed, 30 Sep 2009 23:35:31 +0200 mouss wrote: > Warren Togami wrote: > > I scanned my spam folders and found a few false positives that hit > > on either DNSWL > > FP with DNSWL? > > FP = False Positive = legitimaite mail tagged as spam > DNSWL = Whitelist The term false-positive can a

Re: DNSWL and JMF White false positives, what to do exactly?

On Wed, Sep 30, 2009 at 11:35:31PM +0200, mouss wrote: > > yes, you can report offending IPs, if that makes sense. for example, if > the offending IP is that of an ISP relay, then don't report it: ISPs do > relay spam. Ehm.. surely you should report spam sending ISP relays if they are miscategori

Re: Hostkarma: to be or not to be in SA defaults

Yet Another Ninja wrote: On 9/30/2009 10:25 PM, Raymond Dijkxhoorn wrote: I sincerly hope people realize its a serious thing, and take this mail to improove things and setups. And please dont include lists that are not up to the task yet). This may be of interest.. http://www.uribl.com/mirror

Re: DNSWL and JMF White false positives, what to do exactly?

Warren Togami wrote: > I scanned my spam folders and found a few false positives that hit on > either DNSWL FP with DNSWL? FP = False Positive = legitimaite mail tagged as spam DNSWL = Whitelist if your system adds points because of dnswl, you have a serious problem. .. or do you mean FN (

Re: Hostkarma: to be or not to be in SA defaults

Nobody has yet proposed HOSTKARMA to become enabled by default. I am only interested at the moment in testing how good it is in masschecks. I would like to similarly add other DNSBL's that I haven't tried before like spameatingmonkey or intercept to the masschecks. If you look around online

SA 3.3.0 and sa-compile

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, i'm running SA 3.3.0 (3.3.0-alpha3-r808953) and i've some problem with compiled rules. sa-compile runs without errors, and SA seems to works fine when restarted. But some body rules are now not detected. exemple of simple body rule (for testing):

Re: Hostkarma: to be or not to be in SA defaults

On 9/30/2009 10:25 PM, Raymond Dijkxhoorn wrote: Hi! I have a lot of mighty servers set up ad have servers at 4 locations. I have 50mb bought and using about 30 of it now. I am not sure what it takes to support a default SA inclusion. Does anyone know if what I described sounds like it is enoug

Re: Hostkarma: to be or not to be in SA defaults

Hi! I have a lot of mighty servers set up ad have servers at 4 locations. I have 50mb bought and using about 30 of it now. I am not sure what it takes to support a default SA inclusion. Does anyone know if what I described sounds like it is enough? You personally run all mirrors for DNS lookup

Re: I am getting all external domain emails subject tagged as SpamSpam

Firstly, PLEASE DIRECT ALL REPLIES TO LIST, not my personal email. On Wed, 30 Sep 2009, Nauman Yousuf wrote: i dont know , how subject is filled with spaces , what i need to check am clue less this is happening from last 3 days First question of troubleshooting: What changed? If it worked 4

[OT] Re: unsubscribe

This thread is way off-topic -- it should better be googled for on any random list, rather than re-iterating the arguments over and over. Anyone thinks he can contribute something new that hasn't been mentioned on lists for years? EOT, please. > > > If you want to tell somebody how to unsubscrib

Re: unsubscribe

Miles Fidelman wrote: unless, of course, someone happens to be writing a message with the word "unsubscribe" in it, and DOESN'T want to unsubscribe to the list let you think this is picking a nit I run a list for parents of one of my kid's schools, the school department runs another (badly

Re: unsubscribe

At 11:36 AM 9/30/2009, you wrote: unless, of course, someone happens to be writing a message with the word "unsubscribe" in it, and DOESN'T want to unsubscribe to the list let you think this is picking a nit I run a list for parents of one of my kid's schools, the school department runs an

Re: unsubscribe

Terry Carmen wrote: A better solution would be to automatically handle the request as it was intended. unless, of course, someone happens to be writing a message with the word "unsubscribe" in it, and DOESN'T want to unsubscribe to the list let you think this is picking a nit I run a lis

Re: unsubscribe

Evan Platt wrote: At 08:28 AM 9/30/2009, you wrote: If you want to tell somebody how to unsubscribe, please do it off list. Why doesn't the list block messages which contain a single "unsubscribe" in the body or an empty body with "unsubscribe" in the Subject line? I got bored of seeing these

Re: Hostkarma: to be or not to be in SA defaults

On 09/30/2009 12:32 PM, Marc Perkel wrote: I have a lot of mighty servers set up ad have servers at 4 locations. I have 50mb bought and using about 30 of it now. I am not sure what it takes to support a default SA inclusion. Does anyone know if what I described sounds like it is enough? You pe

Re: I am getting all external domain emails subject tagged as SpamSpam

what you mean dns not found. overloaded with ham means? On Thu, Oct 1, 2009 at 12:01 AM, Benny Pedersen wrote: > On ons 30 sep 2009 19:15:26 CEST, Evan Platt wrote > >> So - what am I missing without wading through all the HTML? >> > > dns is not found ?, overloaded with ham so it cant detect s

Re: Understanding the hostKarma Lists

On ons 30 sep 2009 19:17:46 CEST, John Hardin wrote RCVD_IN_HOSTKARMA_BL RCVD_IN_HOSTKARMA_WL RCVD_IN_HOSTKARMA_YL RCVD_IN_HOSTKARMA_BR +1 -2 the rule name is now longer then it was :/ -- xpoint

Re: [sa] Re: I am getting all external domain emails subject tagged as SpamSpam

On Wednesday 30 September 2009 19:25:52 Charles Gregory wrote: > On Wed, 30 Sep 2009, Nauman Yousuf wrote: > > Guys I am getting all my external domain emails tagged as SpamSpam > > mail headers > > X-Amavis-Alert: BAD HEADER Improper folded header field made up entirely > > of whitespace (cha

Re: I am getting all external domain emails subject tagged as SpamSpam

On ons 30 sep 2009 19:15:26 CEST, Evan Platt wrote So - what am I missing without wading through all the HTML? dns is not found ?, overloaded with ham so it cant detect spam ? -- xpoint

Re: I am getting all external domain emails subject tagged as SpamSpam

On ons 30 sep 2009 18:55:28 CEST, empiric wrote Guys I am getting all my external domain emails tagged as SpamSpam next time dont repost contense from a pastebin, give the link to it -- xpoint

Re: [sa] Re: I am getting all external domain emails subject tagged as SpamSpam

On Wed, 30 Sep 2009, Nauman Yousuf wrote: Guys I am getting all my external domain emails tagged as SpamSpam mail headers X-Amavis-Alert: BAD HEADER Improper folded header field made up entirely of    whitespace (char 20 hex): Subject: ...?Q?Spam?=\n    =?utf-8?Q?Spam=0D=0A=20helo123?=\n \n Wel

Re: I am getting all external domain emails subject tagged as SpamSpam

On Wed, 30 Sep 2009, Nauman Yousuf wrote: Guys I am getting all my external domain emails tagged as SpamSpam X-Amavis-Alert: BAD HEADER Improper folded header field made up entirely of whitespace (char 20 hex): Subject: ...?Q?Spam?=\n =?utf-8?Q?Spam=0D=0A=20helo123?=\n \n ... Subject: =?u

Re: Understanding the hostKarma Lists

On Wed, 30 Sep 2009, Marc Perkel wrote: RCVD_IN_HOSTKARMA_BL RCVD_IN_HOSTKARMA_WL RCVD_IN_HOSTKARMA_YL RCVD_IN_HOSTKARMA_BR +1 -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2

Re: I am getting all external domain emails subject tagged as SpamSpam

At 10:02 AM 9/30/2009, you wrote: Guys I am getting all my external domain emails tagged as SpamSpam logs are attached. mail headers Once again, please don't post in HTML. X-Spam-Status: No So - what am I missing without wading through all the HTML?

Re: I am getting all external domain emails subject tagged as SpamSpam

Guys I am getting all my external domain emails tagged as SpamSpam logs are attached. mail headers Return-Path: Delivered-To: u...@domain.com Received: from localhost (localhost [127.0.0.1]) by mail1.domain.com (Postfix) with ESMTP id 39B3C12B71D for ; Tue, 29 Se

Re: I am getting all external domain emails subject tagged as SpamSpam

At 09:55 AM 9/30/2009, you wrote: 1. Guys I am getting all my external domain emails tagged as SpamSpam 2. 3. logs are attached. 4. mail headers Please make this post more readable. No HTML, Plain Text only, any large attachments should be on Pastebin or such, a

I am getting all external domain emails subject tagged as SpamSpam

1. Guys I am getting all my external domain emails tagged as SpamSpam 2. 3. logs are attached. 4. mail headers 5. 6. Return-Path: 7. Delivered-To: u...@domain.com 8. Received: from localhost (localhost [127.0.0.1]) 9.

Re: Understanding the hostKarma Lists

Marc Perkel wrote: > I like it. > > RCVD_IN_HOSTKARMA_BL > RCVD_IN_HOSTKARMA_WL > RCVD_IN_HOSTKARMA_YL > RCVD_IN_HOSTKARMA_BR > > Let's go with it. Marc, have you updated your wiki to reflect the new rules? I think that will pretty well settle any debate or question people have. --Blaine

Re: Hostkarma: to be or not to be in SA defaults

LuKreme wrote: On 29-Sep-2009, at 23:41, Yet Another Ninja wrote: been following Warren Togami's aggressive lobbying for adding RBLs to SA's defaults, and I have some questions: - is it wise to add yet even more lookups to BLs and slow down SA's already huge amount of DNS lookups. Slow d

Re: Hostkarma: to be or not to be in SA defaults

Yet Another Ninja wrote: been following Warren Togami's aggressive lobbying for adding RBLs to SA's defaults, and I have some questions: - is it wise to add yet even more lookups to BLs and slow down SA's already huge amount of DNS lookups. - is the BL in question (which ever it may be) pr

Re: Understanding the hostKarma Lists

I like it. RCVD_IN_HOSTKARMA_BL RCVD_IN_HOSTKARMA_WL RCVD_IN_HOSTKARMA_YL RCVD_IN_HOSTKARMA_BR Let's go with it. Warren Togami wrote: On 09/29/2009 08:56 PM, Marc Perkel wrote: Could you please decide between the existing JMF rule names or the above proposed HOSTKARMA names? It seems opinion

Re: Understanding the hostKarma Lists

R-Elists wrote: RCVD_HOSTKARMA_BL Black RCVD_HOSTKARMA_WL White RCVD_HOSTKARMA_YL Yellow RCVD_HOSTKARMA_BR Brown OTOH, I really like these new names. My brain thinks less hard to recognize them. How do other people feel. Should we stick to his old names with JMF in the W

RE: Understanding the hostKarma Lists

> > I'll note that he's the one that said he prefers HOSTKARMA > names, despite his own Wiki saying JMF. > > Warren > > Warren, so noted... :-) his wiki and his entries in the SA wiki too... and this isnt a witch hunt by any means... you desiring to set it up and run it through the SA

Re: unsubscribe

At 08:28 AM 9/30/2009, you wrote: If you want to tell somebody how to unsubscribe, please do it off list. Why doesn't the list block messages which contain a single "unsubscribe" in the body or an empty body with "unsubscribe" in the Subject line? I got bored of seeing these on the various lis

Re: unsubscribe

On 30/09/2009 16:08, Dan Schaefer wrote: Didn't we already have this discussion today. You need to use the link in the headers! Yes, but if he could read your message, he could read the headers, right? Think about it, the people that unsubscribe aren't really interested in what you have to s

Re: unsubscribe

On 29-Sep-2009, at 21:54, Gary Smith wrote: Didn't we already have this discussion today. You need to use the link in the headers! Yes, but if he could read your message, he could read the headers, right? Think about it, the people that unsubscribe aren't really interested in what you hav

Re: unsubscribe

On 29-Sep-2009, at 21:54, Gary Smith wrote: Didn't we already have this discussion today. You need to use the link in the headers! Yes, but if he could read your message, he could read the headers, right? -- What the hell's goin' on in the engine room? Were there monkeys? Some te

Re: Hostkarma: to be or not to be in SA defaults

On 29-Sep-2009, at 23:41, Yet Another Ninja wrote: been following Warren Togami's aggressive lobbying for adding RBLs to SA's defaults, and I have some questions: - is it wise to add yet even more lookups to BLs and slow down SA's already huge amount of DNS lookups. Slow down? DNS lookups

Re: Understanding the hostKarma Lists

Warren Togami wrote: > On 09/30/2009 12:18 AM, R-Elists wrote: >> >> warren, >> >> marc already decided once, please dont give more choices... >> >> you should have thought that out before putting the list in a minor >> tiz on >> it. >> >> - rh >> > > I'll note that he's the one that said he pref

Re: Hostkarma: to be or not to be in SA defaults

On 09/30/2009 01:41 AM, Yet Another Ninja wrote: been following Warren Togami's aggressive lobbying for adding RBLs to SA's defaults, and I have some questions: - is it wise to add yet even more lookups to BLs and slow down SA's already huge amount of DNS lookups. - is the BL in question (which

Re: Understanding the hostKarma Lists

On 09/30/2009 12:18 AM, R-Elists wrote: Marc, Could you please decide between the existing JMF rule names or the above proposed HOSTKARMA names? It seems opinions are split here. Warren warren, marc already decided once, please dont give more choices... you should have thought that ou