Re: regex for short messages

2010-06-15 Thread Daniel Lemke
From: Bowie Bailey [mailto:bowie_bai...@buc.com] Sent: Monday, June 14, 2010 5:18 PM I see now. It's hitting on long messages too. I saw it match the subject line rather than the body. I'm not quite sure why. It works if you change it to a rawbody match. Thanks a lot that solved it

mail with faked hyperlink

2010-06-15 Thread Daniel Lemke
The following mail passed SA this morning: http://pastebin.com/AgzqppqA It contains several links that do not match their real target url so it's apparently trying to fool its reader. Are there any rules or plugins that are able to catch mails like these? Daniel

Re: mail with faked hyperlink

2010-06-15 Thread Michelle Konzack
Hello Daniel Lemke, Am 2010-06-15 09:08:41, hacktest Du folgendes herunter: The following mail passed SA this morning: http://pastebin.com/AgzqppqA It contains several links that do not match their real target url so it's apparently trying to fool its reader. Are there any rules or

Re: mail with faked hyperlink

2010-06-15 Thread Daniel Lemke
Michelle Konzack-2 wrote: On my standard Debian installation I get 6.8 Points... Hm got 1.8 from URIBL_BLACK and 1.8 from MISSING_MIMEOLE. But as stated, there should be a rule identifying the mismatch between shown url and real url target. Note: I do not use hostkarma because it has

Re: mail with faked hyperlink

2010-06-15 Thread Michelle Konzack
Hello Daniel Lemke, Am 2010-06-15 04:02:11, hacktest Du folgendes herunter: Hm got 1.8 from URIBL_BLACK and 1.8 from MISSING_MIMEOLE. But as stated, there should be a rule identifying the mismatch between shown url and real url target. This would even hit legal newsletter from e.g. Analog

Re: mail with faked hyperlink

2010-06-15 Thread Ned Slider
On 15/06/10 12:02, Daniel Lemke wrote: Michelle Konzack-2 wrote: On my standard Debian installation I get 6.8 Points... Hm got 1.8 from URIBL_BLACK and 1.8 from MISSING_MIMEOLE. But as stated, there should be a rule identifying the mismatch between shown url and real url target.

Re: List of cell phone company hosts

2010-06-15 Thread J.D. Falk
On Jun 11, 2010, at 7:23 PM, Marc Perkel wrote: Also - I'd like to make a list of host names where email from celll phones comes from. Does anyone have a list of domain name or host names where cell phone email is sent from? The US FCC maintains a do not email list of domains of email/sms

Re: List of cell phone company hosts

2010-06-15 Thread J.D. Falk
On Jun 14, 2010, at 7:33 AM, J.D. Falk wrote: On Jun 11, 2010, at 7:23 PM, Marc Perkel wrote: Also - I'd like to make a list of host names where email from celll phones comes from. Does anyone have a list of domain name or host names where cell phone email is sent from? The US FCC

SA not filtering on distribution lists??!

2010-06-15 Thread Ted Mittelstaedt
Hi All, OK I thought I knew SA but I have a strange one here that is probably due to a configuration directive set wrong, but I don't know what it is. System is running sendmail and SA 3.2.5 mails sent to user e-mail addresses get checked, and get the X-Spam-Status header placed in them.

bayes table crashed

2010-06-15 Thread LuKreme
When trying to dump the local MySQL databases I get: mysqldump: Got error: 145: Table './bayes/bayes_token' is marked as crashed and should be repaired when using LOCK TABLES Anything I need to be aware of? -- 'I cannot! He has been kindness itself to me!' 'And you can be Death itself to

Re: SA not filtering on distribution lists??!

2010-06-15 Thread Jari Fredriksson
On 15.6.2010 21:31, Ted Mittelstaedt wrote: Hi All, OK I thought I knew SA but I have a strange one here that is probably due to a configuration directive set wrong, but I don't know what it is. System is running sendmail and SA 3.2.5 mails sent to user e-mail addresses get

Re: SA not filtering on distribution lists??!

2010-06-15 Thread Jari Fredriksson
On 15.6.2010 21:31, Ted Mittelstaedt wrote: Hi All, OK I thought I knew SA but I have a strange one here that is probably due to a configuration directive set wrong, but I don't know what it is. System is running sendmail and SA 3.2.5 mails sent to user e-mail addresses get

Re: SA not filtering on distribution lists??!

2010-06-15 Thread John Hardin
On Tue, 15 Jun 2010, Ted Mittelstaedt wrote: System is running sendmail and SA 3.2.5 How are they glued together? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4

Re: SA not filtering on distribution lists??!

2010-06-15 Thread Ted Mittelstaedt
spamass-milter Ted On 6/15/2010 11:55 AM, Jari Fredriksson wrote: On 15.6.2010 21:31, Ted Mittelstaedt wrote: Hi All, OK I thought I knew SA but I have a strange one here that is probably due to a configuration directive set wrong, but I don't know what it is. System is running sendmail