Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Matus UHLAR - fantomas
On 23.11.09 12:19, rich...@buzzhost.co.uk wrote: I'm not really familiar with HABEAS_ACCREDITED_COI and I'm interested to know who is behind it, and how it relates to the Spamassassin project. HABEAS was company acquired by ReturnPath. It tries to help out differing between legal marketing

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread LuKreme
On Nov 23, 2009, at 6:14, Matus UHLAR - fantomas uh...@fantomas.sk wrote: You should complain to ReturnPath Or just change the scores from -8.0 to +2.0

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Hajdú Zoltán
Or just report it... Sender Abuse and Complaint Reporting Any concerns or complaints regarding the Return Path Certification program can be submitted to certificat...@returnpath.net. Cheers, rich...@buzzhost.co.uk írta: I'm not really familiar with HABEAS_ACCREDITED_COI and I'm interested

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread rich...@buzzhost.co.uk
Thanks to Matus for the explanation, LuKreme for the suggestion on scoring and Hajdu for the contact details. I am obliged to you and thank you for your time.

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Matus UHLAR - fantomas
On Nov 23, 2009, at 6:14, Matus UHLAR - fantomas uh...@fantomas.sk wrote: You should complain to ReturnPath On 23.11.09 06:40, LuKreme wrote: Or just change the scores from -8.0 to +2.0 Yes, why to differ between non-abusing and abusing marketers... -- Matus UHLAR - fantomas,

using Data of Project Honeypot

2009-11-23 Thread sebast...@debianfan.de
Hello, how do i use the data of project honeypot in spamassassin? thx Sebastian

[OT] Massive Crackdown on Internet Drug Traffic

2009-11-23 Thread Adam Katz
FYI, thought this might be of interest. -- Forwarded message -- Date: Mon, 23 Nov 2009 07:39:46 -0500 From: Knujon Reports repo...@knujon.com Reply-To: cont...@knujon.com Subject: Massive Crackdown on Internet Drug Traffic Hello, We are seeing the beginning of a new chapter in

Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
Hi. I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. Unfortunately, the rule that I have: header L_UNDISCLOSEDTo:raw =~ /undisclosed-recipients: ?;/ describe L_UNDISCLOSED To: list is meaningless and no Cc: score

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Michael Scheidell
Philip Prindeville wrote: Hi. I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. I went round and round with this a while back. SA 3.25 has a problem with perl null vs 0 vs ''. so a To header (or CC header) with no content looks

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
On 11/23/2009 12:10 PM, Michael Scheidell wrote: Philip Prindeville wrote: Hi. I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. I went round and round with this a while back. SA 3.25 has a problem with perl null vs 0

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Michael Scheidell
Philip Prindeville wrote: but as you say, if it can't tell the difference between and undef, then that's an issue. use header ALL to check for a \nCC (which could be blank) or just use your MTA to reject it at SMTPtime.

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
On 11/23/2009 12:18 PM, Michael Scheidell wrote: Philip Prindeville wrote: but as you say, if it can't tell the difference between and undef, then that's an issue. use header ALL to check for a \nCC (which could be blank) or just use your MTA to reject it at SMTPtime.

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread J.D. Falk
On Nov 23, 2009, at 6:14 AM, Matus UHLAR - fantomas wrote: You should complain to ReturnPath. Iirc, HABEAS used to sue spammers misusing their technology. Don't know if ReturnPath continues prac ticing this. Actually, you're confusing Habeas's first technology (which involved suing misuse of

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread jdow
From: J.D. Falk jdfalk-li...@cybernothing.org Sent: Monday, 2009/November/23 13:37 On Nov 23, 2009, at 6:14 AM, Matus UHLAR - fantomas wrote: You should complain to ReturnPath. Iirc, HABEAS used to sue spammers misusing their technology. Don't know if ReturnPath continues prac ticing this.

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Aaron Wolfe
On Mon, Nov 23, 2009 at 4:46 PM, jdow j...@earthlink.net wrote: From: J.D. Falk jdfalk-li...@cybernothing.org Sent: Monday, 2009/November/23 13:37 On Nov 23, 2009, at 6:14 AM, Matus UHLAR - fantomas wrote: You should complain to ReturnPath. Iirc, HABEAS used to sue spammers misusing their

Re: rbl checks not running

2009-11-23 Thread Mark Hedges
On Sat, 21 Nov 2009, Mark Hedges wrote: On Sat, 21 Nov 2009, Charles Gregory wrote: Did you look at the logs you posted? NONE of the DNS tests are being launched on msg 26661 Yes, that is the problem. They run with `spamassassin`, but they do not run from `spamd`. Do other

Re: rbl checks not running

2009-11-23 Thread Mark Hedges
OMG I am SO DUMB - I had skip_rbl_checks set in my personal userconf. DUH. Thanks everyone for your helpful suggestions - actually it was working fine from the beginning. Mark

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread LuKreme
On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas uh...@fantomas.sk wrote: Yes, why to differ between non-abusing and abusing marketers... We've been through this before. On my mail, habeas is a very strong indicator of spam. It does not appear in legitimate mail. I don't know who these

Re: Undisclosed recipients :; -- again

2009-11-23 Thread LuKreme
On Nov 23, 2009, at 12:05, Philip Prindeville philipp_s...@redfish-solutions.com wrote: I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. What's Cc: have to do with it? undisclosed recipients is used for Bcc: mail I used it all

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Daniel J McDonald
On Mon, 2009-11-23 at 17:08 -0700, LuKreme wrote: On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas uh...@fantomas.sk wrote: Yes, why to differ between non-abusing and abusing marketers... We've been through this before. On my mail, habeas is a very strong indicator of spam. It does

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Benny Pedersen
On tir 24 nov 2009 01:11:38 CET, LuKreme wrote I used it all the time. And you WILL 'block' legitimate mail. and thats always sender to decide its legitimate :) i see a pattern there -- xpoint

cleanup for DNSBLs

2009-11-23 Thread Adam Katz
Unless there are objections, I'm going to add two tests to my sandbox: RCVD_IN_NIX_SPAM, a new (to us) DNSBL populated by the same source as the original [N]iXhash zone, with results on intra2net that look quite promising: 72.98:0.12 spam:ham (PSBL has 48.69:0.36),

Re: Undisclosed recipients :; -- again

2009-11-23 Thread John Hardin
On Mon, 23 Nov 2009, LuKreme wrote: On Nov 23, 2009, at 12:05, Philip Prindeville philipp_s...@redfish-solutions.com wrote: I want to block all messages that I'm getting that have: To: undisclosed recipients: ; undisclosed recipients is used for Bcc: mail I used it all the time. And you

Re: cleanup for DNSBLs

2009-11-23 Thread Warren Togami
On 11/23/2009 07:34 PM, Adam Katz wrote: Unless there are objections, I'm going to add two tests to my sandbox: RCVD_IN_NIX_SPAM, a new (to us) DNSBL populated by the same source as the original [N]iXhash zone, with results on intra2net that look quite promising: 72.98:0.12 spam:ham (PSBL has

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
On 11/23/2009 05:11 PM, LuKreme wrote: On Nov 23, 2009, at 12:05, Philip Prindeville philipp_s...@redfish-solutions.com wrote: I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. What's Cc: have to do with it?

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
On 11/23/2009 05:11 PM, LuKreme wrote: On Nov 23, 2009, at 12:05, Philip Prindeville philipp_s...@redfish-solutions.com wrote: I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. What's Cc: have to do with it?

Re: [SA] cleanup for DNSBLs

2009-11-23 Thread Adam Katz
Warren Togami wrote: On 11/23/2009 07:34 PM, Adam Katz wrote: Unless there are objections, I'm going to add two tests to my sandbox: RCVD_IN_NIX_SPAM, a new (to us) DNSBL populated by the same source as the original [N]iXhash zone, with results on intra2net that look quite promising:

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread rich...@buzzhost.co.uk
On Mon, 2009-11-23 at 17:08 -0700, LuKreme wrote: On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas uh...@fantomas.sk wrote: Yes, why to differ between non-abusing and abusing marketers... We've been through this before. On my mail, habeas is a very strong indicator of spam. It does