RE: exclude domain from server-wide

2009-10-19 Thread Spamassassin List
I am running a qmail + simscan + spamassassin + clamav on a centos 5.3. Regards there are many ways to do it... you could try @example.com in your /var/qmail/control/badmailfrom might work... depending on some factors... you could smtp reject above a certain score and do a

Re: Other DNSBL's

2009-10-19 Thread Bjoern Sikora
I'm looking to add other DNSBL's to tomorrow's weekly mass check. I realize most of them probably are too broken to bother, but it would be nice to get some real numbers to confirm it so since the Internet lacks any real DNSBL comparisons that include Ham FP safety. If you are looking for

Re: Other DNSBL's

2009-10-19 Thread Justin Mason
(back from vacation ;) BTW, could you add tflags nopublish to any rules? or use a T_ prefix on the rule names. that will ensure the testing rules won't get into any published ruleset accidentally. this is very important to avoid accidentally causing a production-level DOS on the BL's

RE: Constant Contact

2009-10-19 Thread Randal, Phil
Tara Natanson wrote: On Fri, Oct 16, 2009 at 12:49 PM, Adam Katz antis...@khopis.com wrote: Does anybody here know anything about the legitimacy of Constant Contact http://www.constantcontact.com/anti_spam.jsp ? Hello, I work for Constant Contact. We take reports of spam very

Re: Constant Contact

2009-10-19 Thread Mark Samples
I get junk from these guys all of the time, others that have followed the 'opt-out' IMO just use it to confirm an email address for sale to others, such as themselves. Maybe I am just extra paranoid, but marketers should just stick to a web search for people that want to purchase from them.

anyone collecting French 419 scams?

2009-10-19 Thread McDonald, Dan
Lately, a few 419 scams have been slipping through to me, written in French - I get two or three a week. It's sort of amusing to me, but wondered if anyone is collecting them to write rules. X-Spam-Status: No, score=4 tagged_above=-999 required=4.5 tests=[BOTNET_SOHO=-0.1, L_P0F_UNKN=0.8,

Re: anyone collecting French 419 scams?

2009-10-19 Thread John Hardin
On Mon, 19 Oct 2009, McDonald, Dan wrote: Lately, a few 419 scams have been slipping through to me, written in French - I get two or three a week. It's sort of amusing to me, but wondered if anyone is collecting them to write rules. X-Spam-Status: No, score=4 tagged_above=-999 required=4.5

Re: anyone collecting French 419 scams?

2009-10-19 Thread John Hardin
On Mon, 19 Oct 2009, McDonald, Dan wrote: http://pastebin.com/m693d3d17 One thing that leaps right out at me is the encoded characters (e.g. #3648;) in a text/plain body part. Does tis-620 provide for that? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/

Re: Constant Contact

2009-10-19 Thread Dave Pooser
When Constant Contact gets a clue and automatically requests an opt-in confirmation for ALL email addresses uploaded in bulk by their customers then I'll stop adding a a high score in SA. The problem with that is that most of Constant Contact's customers are small business that may have users

Re: anyone collecting French 419 scams?

2009-10-19 Thread John Wilcock
I'd be happy to see them. I'm working on updating the Advance Fee 419 ruleset and your samples would be welcome. Feel free to gzip up a mbox and send it to me. I have a ruleset at http://www.tradoc.fr/spamassassin/fraude_fr.cf that, while it hasn't been actively updated for a while, still hits

KHOP_RCVD_UNTRUST

2009-10-19 Thread Bowie Bailey
After testing the khop rules for a few days, I noticed one oddity. TOP HAM RULES FIRED RANKRULE NAME COUNT %OFRULES %OFMAIL %OFSPAM %OFHAM 8

Re: KHOP_RCVD_UNTRUST

2009-10-19 Thread Warren Togami
On 10/19/2009 10:11 AM, Bowie Bailey wrote: After testing the khop rules for a few days, I noticed one oddity. TOP HAM RULES FIRED RANKRULE NAME COUNT %OFRULES %OFMAIL %OFSPAM %OFHAM

Re: KHOP_RCVD_UNTRUST

2009-10-19 Thread Adam Katz
Bowie Bailey wrote: After testing the khop rules for a few days, I noticed one oddity. TOP HAM RULES FIRED - RANKRULE NAME COUNT %OFRULES %OFMAIL %OFSPAM %OFHAM

Pulling my hair out

2009-10-19 Thread amadis
I usually think of myself as pretty capable with a computer but Spamassassin and it's website have made me think twice. I took me 20 minutes just to figure out where this forum was. I feel like Apache is trying to weed out dunderheads like me from using their product. I swear I cannot understand

Re: Pulling my hair out

2009-10-19 Thread Ted Mittelstaedt
amadis wrote: I usually think of myself as pretty capable with a computer but Spamassassin and it's website have made me think twice. I took me 20 minutes just to figure out where this forum was. I feel like Apache is trying to weed out dunderheads like me from using their product. I swear I

Re: Pulling my hair out

2009-10-19 Thread Evan Platt
It would help to explain what operating system you are using, at what point you are stuck at the installation, what you've read and what you've tried. Did you look at http://wiki.apache.org/spamassassin/StartUsing ? At 04:26 PM 10/19/2009, amadis wrote: I usually think of myself as pretty

Re: Pulling my hair out

2009-10-19 Thread John Rudd
All: _IS_ there a Thunderbird plugin for SA? That would seem to be quite useful. 1) install perl for your platform (amadis: the perl language interpreter is required for Spam Assassin) 2) install SA 3) install the (hypothetical) Thunderbird plugin Then you can use SA to augment Thunderbird's

Re: Pulling my hair out

2009-10-19 Thread Karsten Bräckelmann
On Mon, 2009-10-19 at 16:26 -0700, an anonymous Nabble user wrote: I usually think of myself as pretty capable with a computer but Spamassassin and it's website have made me think twice. I took me 20 minutes just to figure out where this forum was. I feel like Apache is trying to weed out

Re: Pulling my hair out

2009-10-19 Thread Adriene Harrison
SA is only for mail servers?! I wish that had been made clear on the SA website. Even now looking at the homepage and FAQ page I see nothing to that effect. But thank you all who responded for clearing this up. I was beginning to think I must have taken a stupid pill when I woke up this

Re: Pulling my hair out

2009-10-19 Thread Evan Platt
At 04:42 PM 10/19/2009, you wrote: Threats like that never help, and rarely yield any useful responses. I love the people who make threats for free software. If you don't fix this, I'm switching to competitor For one, you get more bees with honey Second, you're threatening to take away

Re: Pulling my hair out

2009-10-19 Thread Karsten Bräckelmann
On Mon, 2009-10-19 at 16:50 -0700, Adriene Harrison wrote: SA is only for mail servers?! I wish that had been made clear on the SA website. Even now looking at the homepage and FAQ page I see nothing to that effect. But thank you all who responded for clearing As I said, server-side filtering

Re: Pulling my hair out

2009-10-19 Thread Gene Heskett
On Monday 19 October 2009, Ted Mittelstaedt wrote: amadis wrote: I usually think of myself as pretty capable with a computer but Spamassassin and it's website have made me think twice. I took me 20 minutes just to figure out where this forum was. I feel like Apache is trying to weed out