On 15/10/2010 00:39, Bart Schaefer wrote:
We have a couple of mail servers running SpamAssassin. One is stock
CentOS5 and therefore running SA 3.2.4. The other is a test platform
running SA 3.3.1 (installed from rpmforge in case that matters). Both
have the latest sa-update configurations
Hello all, here's my problem:
I'm receiving alot of spam which has a (less than symbol) in the
recipient field. For example, I have this in the header:
To: abo...@koala.it
I'd need a spamassassin rule that's able to catch this spam, I had no
success. The less than symbol seems to be
On 15/10/2010 12:01, Niente0 wrote:
Hello all, here's my problem:
I'm receiving alot of spam which has a (less than symbol) in the
recipient field. For example, I have this in the header:
To: abo...@koala.it
I'd need a spamassassin rule that's able to catch this spam, I had no
success. The
Giles Coochey wrote:
Have you tried escaping it with \x3c ?
Thanks for your suggestion, I tried it now but with no success. Here's my
rule:
header TO1 To:name =~ /\x3c/i
score TO1 100
I have received other less than spam just now. :-(
--
View this message
On 2010-10-15 12:58, Niente0 wrote:
Giles Coochey wrote:
Have you tried escaping it with \x3c ?
Thanks for your suggestion, I tried it now but with no success. Here's my
rule:
header TO1 To:name =~ /\x3c/i
score TO1 100
I have received other less than spam
Yet Another Ninja wrote:
On 2010-10-15 12:58, Niente0 wrote:
pls post a spam sample on pastebin.com and send the link to the list
Hi, I tried with 3 different browsers but pastebin.com shows only a blank
page after submitting text. So I posted it here:
http://snipt.org/koRn/
--
View
On 2010-10-15 14:18, Niente0 wrote:
Yet Another Ninja wrote:
On 2010-10-15 12:58, Niente0 wrote:
pls post a spam sample on pastebin.com and send the link to the list
Hi, I tried with 3 different browsers but pastebin.com shows only a blank
page after submitting text. So I posted it here:
Yet Another Ninja wrote:
On 2010-10-15 14:18, Niente0 wrote:
Untested:
# To: i...@aags.com
header TO1 To =~ /^/
Thank you!
I tested it but it still doesn't work. :-(
For testing purposes, I created a fake user in my Outlook address book, with
name and email equal to
On 2010-10-15 14:49, Niente0 wrote:
Yet Another Ninja wrote:
On 2010-10-15 14:18, Niente0 wrote:
Untested:
# To: i...@aags.com
header TO1 To =~ /^/
Thank you!
I tested it but it still doesn't work. :-(
For testing purposes, I created a fake user in my Outlook address book,
On Fri, 2010-10-15 at 05:18 -0700, Niente0 wrote:
Yet Another Ninja wrote:
On 2010-10-15 12:58, Niente0 wrote:
pls post a spam sample on pastebin.com and send the link to the list
Hi, I tried with 3 different browsers but pastebin.com shows only a blank
page after submitting text.
On Fri, 15 Oct 2010, Niente0 wrote:
Yet Another Ninja wrote:
On 2010-10-15 14:18, Niente0 wrote:
Untested:
# To: i...@aags.com
header TO1 To =~ /^/
Thank you!
I tested it but it still doesn't work. :-(
For testing purposes, I created a fake user in my Outlook address book,
On Fri, 15 Oct 2010, Niente0 wrote:
header TO1 To:name =~ /\/i
but it seems no to work... Could you please help me? I'm desperate!
Thanks :-)
That probably means the parser has a bug.
--
John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
jhar...@impsec.org
Yet Another Ninja wrote:
On 2010-10-15 14:49, Niente0 wrote:
works for me
After some more tests, it seems to work for me too! I discovered that in my
tests the server added a space after the second quote: (space)
while in real spam it was not present.
So here are my 2 new rules:
On 10/15/2010 10:00 AM, Niente0 wrote:
Yet Another Ninja wrote:
On 2010-10-15 14:49, Niente0 wrote:
works for me
After some more tests, it seems to work for me too! I discovered that in my
tests the server added a space after the second quote: (space)
while in real spam it was not
Hi,
Recently I've been getting a bit of filter-bleed from a bunch of spams
injected via Hotmail/Yahoo that contain shortened URLs e.g. bit.ly/foo
that upon closer inspection would have been rejected with a high score
if the real URL had been used.
Can this be made to work with v3.2.5, or
15 matches
Mail list logo
