Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Greg Troxel
pgpbkzDGoM3Fr.pgp Description: PGP signature

AW: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Daniel Lemke
Nmake is not running on 64-bit? Our 2008 x64 is just busy but on my windows 7 x64 it's working fine. Does it report an error? For dmake I had similar issues while building the source, nmake works much better for me, so I suggest you should try that first. Daniel -Ursprüngliche

AW: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Daniel Lemke
Just tested, definitely running under w2k8 x64, this must be another problem. Where do you have your nmake from? Try this: http://download.microsoft.com/download/vc15/patch/1.52/w95/en-us/nmake15.exe Daniel -Ursprüngliche Nachricht- Von: weirdbeardmt [mailto:weirdbe...@gmail.com]

Re: Cyrillic text isn't matched when quoted-printable (?!)

2010-03-19 Thread John Hardin
On Fri, 19 Mar 2010, Wolfgang Zeikat wrote: I have written some body rules to catch cyrillic text, using a utf-8 aware editor. They work fine in mails with Content-Type: text/html; charset=UTF-8 They do not catch the same strings in mails like Content-Type: text/plain; charset=windows-1251

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Michael Scheidell
On 3/19/10 8:33 AM, Greg Troxel wrote: Am 2010-03-18 14:26:31, schrieb Chris Richman: Hi, Michael. If there is an email address that you'd like to never receive email from LinkedIn, let me know and I can add it to our suppression list. Sorry for the troubles. you want

Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Matt Thornton
Sorry, I should be clearer, I see that error when I run nmake (not nmake install). On Fri, Mar 19, 2010 at 1:20 PM, Matt Thornton weirdbe...@gmail.com wrote: HI Daniel. Thanks a lot. Indeed, Nmake does work (it's the extractor that says it doesn't work...!) Anyway, I put NMAKE.EXE and the

Re: unwhitelist from_dkim?

2010-03-19 Thread Michael Scheidell
On 3/18/10 9:00 PM, Mark Martinec wrote: Should have been, but it was never implemented. Here is a patch to implement it (against 3.3.0 or 3.3.1 or trunk). Please open a feature request so that it can be properly integrated into the next version. done, lets hope we can get it into 3.3.1

Re: unwhitelist from_dkim?

2010-03-19 Thread Mark Martinec
Michael, done, lets hope we can get it into 3.3.1 so I don't have to patch it. https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6382 Thanks! The 3.3.1 release procedure freight train has already left a few days ago, so you'll have to patch it. I expect it to be rolled into 3.3.2. Mark

AW: [SpamAssassin] Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Daniel Lemke
Try another Extract Tool (WinRar worked well for me). I've seen a few tools that have serious problems extracting those files. Maybe yours just cuts some linefeeds or so. Daniel Von: Matt Thornton [mailto:weirdbe...@gmail.com] Gesendet: Freitag, 19. März 2010 14:31 An: Daniel Lemke Cc:

Re: Cyrillic text isn't matched when quoted-printable (?!)

2010-03-19 Thread Wolfgang Zeikat
John Hardin wrote: On Fri, 19 Mar 2010, Wolfgang Zeikat wrote: I have written some body rules to catch cyrillic text, using a utf-8 aware editor. They work fine in mails with Content-Type: text/html; charset=UTF-8 They do not catch the same strings in mails like Content-Type: text/plain;

Re: [SpamAssassin] Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Matt Thornton
I tried with WinRAR - admittedly i'm extracting on 32bit WinXP then moving over to W2k8, but still same error. On Fri, Mar 19, 2010 at 1:49 PM, Daniel Lemke le...@jam-software.comwrote: Try another Extract Tool (WinRar worked well for me). I’ve seen a few tools that have serious problems

Re: Yahoo/URL spam

2010-03-19 Thread Charles Gregory
On Thu, 18 Mar 2010, Ned Slider wrote: If that's not an option, how about a meta rule for FROM_YAHOO and __HAS_ANY_URI (this rule exists in SA). Lots of ham may contain a URI, but how much ham contains ONLY a URI? Rough outline of rule, untested. rawbody __BODY_ONLY_URI

Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Daniel Lemke
Hmm that's strange, I had no problems doing this on a clean W2k8. Did you previously installed any other perl (ActivePerl, Strawberry Perl)? What does it says if you try to build on your Win XP? Daniel Von: Matt Thornton [mailto:weirdbe...@gmail.com] Gesendet: Freitag, 19. März 2010 15:02 An:

what does this dkim whitelist rule do?

2010-03-19 Thread Michael Scheidell
found in dns: 0.3.3.updates.spamassassin.org = 924671 60_whitelist_dkim.cf:def_whitelist_from_dkim *...@*paypal.com I think I would understand def_whitelist_from_dkim *...@*paypal.com but what does the whitespace do? will it whitelist anything (any domain) if the signer is

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Michelle Konzack
Hello Michael, and of course Chris Richman which I have added to show him a real live example of LinkedIn sSpam on mailinglists. Am 2010-03-19 09:25:10, hacktest Du folgendes herunter: you want a list of 237,456 email addresses? I think it is just easier if I blacklist linkedin. I have

Re: what does this dkim whitelist rule do?

2010-03-19 Thread Mark Martinec
Michael, found in dns: 0.3.3.updates.spamassassin.org = 924671 60_whitelist_dkim.cf:def_whitelist_from_dkim *...@* paypal.com I think I would understand def_whitelist_from_dkim *...@*paypal.com but what does the whitespace do? $ man Mail::SpamAssassin::Plugin::DKIM

Re: bayes, numbers of tokens and performance

2010-03-19 Thread Kevin Parris
It doesn't really work that way. Bayes is just one part of the picture and in order to get good results you have to turn the full toolkit loose on the problem; I'm not sure Bayes by itself should be expected to achieve 95% recognition anyway. The main flaw in your current plan is that once

Re: users Digest 19 Mar 2010 11:56:42 -0000 Issue 3121

2010-03-19 Thread Neil Schwartzman
On 10-03-19 7:56 AM, users-digest-h...@spamassassin.apache.org users-digest-h...@spamassassin.apache.org wrote: editorial comment (why would you enter such things as this since neither facebook not linkedin have any way to stop spamming you?.. no, they don't. all 500MM people on facebook or

Re: what does this dkim whitelist rule do?

2010-03-19 Thread Ned Slider
Michael Scheidell wrote: found in dns: 0.3.3.updates.spamassassin.org = 924671 60_whitelist_dkim.cf:def_whitelist_from_dkim *...@*paypal.com I think I would understand def_whitelist_from_dkim *...@*paypal.com but what does the whitespace do? will it whitelist anything (any

Re: Cyrillic text isn't matched when quoted-printable (?!)

2010-03-19 Thread Benny Pedersen
On fre 19 mar 2010 14:16:50 CET, John Hardin wrote Save another version of your rules encoded in windows-1251? spamassassin -D generic -t msg it converts here, but to what ? -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Sa-update

2010-03-19 Thread Kaleb Hosie
I've just finished updating my production server to SpamAssassin 3.3.0 and I immediately ran sa-update to get the latest rule set for SpamAssassin. Is there a way to tell whether sa-update downloaded the latest definitions correctly? A user has just emailed me with some SPAM that was sent about

Re: Pathological messages causing long scan times

2010-03-19 Thread Kris Deugau
Gary Smith wrote: I'm not seeing your 130 sec CPU issue on my end. Are as mentioned by Matt, are you running into some DNS issue? These are stock rule + other house rules in place. I'm not getting any type of DNS hit, this might because you modified the headers. Either way, 5 seconds for

Re: Sa-update

2010-03-19 Thread Bowie Bailey
Kaleb Hosie wrote: I've just finished updating my production server to SpamAssassin 3.3.0 and I immediately ran sa-update to get the latest rule set for SpamAssassin. Is there a way to tell whether sa-update downloaded the latest definitions correctly? A user has just emailed me with some

Microsoft Forefront Server Security forwarded attachment

2010-03-19 Thread ForefrontServerSecurity
The body from the message RE: unwhitelist from_dkim?, originally sent to you by Chris Richman (crich...@linkedin.com), has been forwarded to you from the Microsoft Forefront Server Security Quarantine area. This message body may have been re-scanned by Microsoft Forefront Server Security and

Microsoft Forefront Server Security forwarded attachment

2010-03-19 Thread ForefrontServerSecurity
The body from the message RE: unwhitelist from_dkim?, originally sent to you by Chris Richman (crich...@linkedin.com), has been forwarded to you from the Microsoft Forefront Server Security Quarantine area. This message body may have been re-scanned by Microsoft Forefront Server Security and

Microsoft Forefront Server Security forwarded attachment

2010-03-19 Thread ForefrontServerSecurity
The body from the message RE: unwhitelist from_dkim?, originally sent to you by Chris Richman (crich...@linkedin.com), has been forwarded to you from the Microsoft Forefront Server Security Quarantine area. This message body may have been re-scanned by Microsoft Forefront Server Security and

RE: Sa-update

2010-03-19 Thread Kaleb Hosie
Bowie Bailey wrote: The main problem is the BAYES_00 rule. Apparently, your bayes db thinks this email is definitely not spam. Are you sure it is being trained properly? Without any bayes hit, this would have scored 4.8. If you can get bayes to score it as spam, you'll have it. -- Bowie I

ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Justin Mason
Release Notes -- Apache SpamAssassin -- Version 3.3.1 Introduction This is a minor release, adding a new URIBL network rule (URIBL_DBL_SPAM, for the Spamhaus DBL). Downloading and availability Downloads are available from:

Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Matt Thornton
Have also tried updated version of nmake that came with Visual Studio 2008 (v9.00 ish..) and still same error. On Fri, Mar 19, 2010 at 4:14 PM, Matt Thornton weirdbe...@gmail.com wrote: OK this is so bizarre. Have just installed everything on my local workstation (Win XP) - and I get the

Re: Sa-update

2010-03-19 Thread Mark Martinec
On Friday 19 March 2010 16:17:21 Kaleb Hosie wrote: Is there a way to tell whether sa-update downloaded the latest definitions correctly? Yes: sa-update -v Mark

Re: Sa-update

2010-03-19 Thread Mikael Syska
Hi, See this link for a way to train bayes, when using exchange. mvh On Fri, Mar 19, 2010 at 4:58 PM, Kaleb Hosie kho...@spectraaluminum.com wrote: Bowie Bailey wrote: The main problem is the BAYES_00 rule.  Apparently, your bayes db thinks this email is definitely not spam.  Are you sure it

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Bret Miller
On 3/19/2010 5:25 AM, weirdbeardmt wrote: I'm trying to install SA 3.30 on W2k8 64-bit. I have ActivePerl 5.10.1 with dmake 4.12 (since nmake won't run on 64-bit). I am quite new to this so sorry if I'm asking something stupidly obvious. I've installed Net-DNS, IP-Country, Mail-SPF, Error,

RE: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Chris Richman
Hi, Michelle. I've added those domains to our suppression list so they shouldn't receive email from us anymore. I wasn't able to add gnome.org because we have several users with confirmed gnome.org email addresses. Chris -Original Message- From: Michelle Konzack

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Michael Scheidell
On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requested file is not found on this server. -- Michael Scheidell, CTO Phone: 561-999-5000, x 1259

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Bob O'Brien
Chris Richman wrote: Hi, Michelle. I've added those domains to our suppression list so they shouldn't receive email from us anymore. I wasn't able to add gnome.org because we have several users with confirmed gnome.org email addresses. I would like to recommend that you find a way to

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Jason Bertoch
On 2010/03/19 2:24 PM, Michael Scheidell wrote: On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requested file is not found on this server. I

careful on your clicks: at least one hijacked server: Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Michael Scheidell
On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 I clicked on the download and got redirected (hijacked)? to this site: http://www.takeyellow.com/apachemirror/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz TAKEYELLOW IS NO LONGER UNDER

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Jim Knuth
schrieb Michael Scheidell: On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requested file is not found on this server. use CPAN, everything is

if can (class:method)

2010-03-19 Thread Michael Scheidell
is this the right syntax? (I heard that if you don't have the commercial version of DCC, you get link and debug warnings) can someone without the commercial version of DCC see if this stops the debug warnings? # DCC ifplugin Mail::SpamAssassin::Plugin::DCC score DCC_CHECK0 1.1

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Michael Scheidell
On 3/19/10 2:37 PM, Jim Knuth wrote: schrieb Michael Scheidell: On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requested file is not found on

Re: Sa-update

2010-03-19 Thread RW
On Fri, 19 Mar 2010 11:17:21 -0400 Kaleb Hosie kho...@spectraaluminum.com wrote: The only configuration I've changed since the install was the report_safe and trusted_networks option. Is there something else I need to configure to fine tune SA? You need to set internal_networks. You can set

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Michelle Konzack
Hello Chris, Am 2010-03-19 11:06:08, hacktest Du folgendes herunter: Hi, Michelle. I've added those domains to our suppression list so they shouldn't receive email from us anymore. I wasn't able to add gnome.org because we have several users with confirmed gnome.org email addresses. The

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Jonathan Nichols
On Mar 19, 2010, at 11:31 AM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 The Ubuntu package for hardy is *way* out of date and seemingly stuck at 3.2.5, Is it safe to update via CPAN and still retain compatibility with apt-get/aptitude? Cheers!

RE: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Chris Richman
Thanks, Michelle, I've added those to our suppression list, too. Oddly enough, a user had actually confirmed gtk-l...@gnome.org, so I removed it from his account. If anyone knows of a reliable way to identify mailing list addresses, I'd love to know so we could block mail to them. Currently, we

RE: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Chris Richman
We've got a project planned for Q2 that might help with this. We currently segregate some of our mail streams by sending IP. Unfortunately, too many types of messages (including invitations) are still sent from the catch-all IPs. With this project, we should have all of the major mail streams

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Mikael Syska
Hi On Fri, Mar 19, 2010 at 11:09 PM, Jonathan Nichols jnich...@pbp.net wrote: On Mar 19, 2010, at 11:31 AM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 The Ubuntu package for hardy is *way* out of date and seemingly stuck at 3.2.5, Is it safe to update via

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Michelle Konzack
Hello Chris, Am 2010-03-19 15:11:37, hacktest Du folgendes herunter: Thanks, Michelle, I've added those to our suppression list, too. Oddly enough, a user had actually confirmed gtk-l...@gnome.org, so I removed it from his account. OK, If anyone knows of a reliable way to identify mailing

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Michelle Konzack
Hello Chris, Am 2010-03-19 15:20:40, hacktest Du folgendes herunter: Obviously we'd prefer that nobody filter our mail, but, like I said before, we recognize that it only hurts us to send mail to people who don't want it. We'll continue taking steps to prevent mail from gong to people who

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Bob O'Brien
Michelle Konzack wrote: I could even say Block my domain tamay-dogan.net but what is IF one of my employees want to use LinedIn, Facebook or Twitter? This is exactly what I'm asking for. If my users choose to sign up, fine, let them use it and then /those/ addresses can receive

Social Networking Sites and Mailing Lists (was: LinkedIn Spam)

2010-03-19 Thread Karsten Bräckelmann
On Fri, 2010-03-19 at 15:11 -0700, Chris Richman wrote: Thanks, Michelle, I've added those to our suppression list, too. Oddly enough, a user had actually confirmed gtk-l...@gnome.org, so I removed it from his account. OK, I successfully managed to shut myself up and just move along a few

Default rulesets updating daily

2010-03-19 Thread Chris
SA3.3.0, just a general question, I've noticed that over the past six days that during my 01:11 sa-update cronjob that the complete default rulesets are being updated. The file names are in fact changing, ie..922182.tar.gz, 922507.tar.gz and so forth, just curious as to why the daily changes when

Re: careful on your clicks: at least one hijacked server: Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Daryl C. W. O'Shea
On 19/03/2010 2:34 PM, Michael Scheidell wrote: On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 I clicked on the download and got redirected (hijacked)? to this site:

Re: Default rulesets updating daily

2010-03-19 Thread Daryl C. W. O'Shea
On 19/03/2010 8:34 PM, Chris wrote: SA3.3.0, just a general question, I've noticed that over the past six days that during my 01:11 sa-update cronjob that the complete default rulesets are being updated. The file names are in fact changing, ie..922182.tar.gz, 922507.tar.gz and so forth, just

Re: careful on your clicks: at least one hijacked server: Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

2010-03-19 Thread Michael Scheidell
I'm not sure that's accurate. Did you get that link from our download page today? yes, I did. The site seems to still be an Apache mirror, it just hasn't updated yet, AFAICS. then someone needs to unauthorize them. its a parking page, someone lost that hostname and someone else