Re: Collecting IP reputation data from many people

2010-10-23 Thread Per Jessen
Royce Williams wrote: On Fri, Oct 22, 2010 at 5:19 AM, Michael Scheidell michael.scheid...@secnap.com wrote: On 10/21/10 8:50 PM, dar...@chaosreigns.com wrote: I'd like to try collecting reputation data for every IP address from everyone willing to submit it. re-inventing the wheel.

Re: Collecting IP reputation data from many people

2010-10-23 Thread Royce Williams
On Sat, Oct 23, 2010 at 7:31 AM, Per Jessen p...@computer.org wrote: Royce Williams wrote: On Fri, Oct 22, 2010 at 5:19 AM, Michael Scheidell michael.scheid...@secnap.com wrote: On 10/21/10 8:50 PM, dar...@chaosreigns.com wrote: I'd like to try collecting reputation data for every IP

rule to catch subject spamming

2010-10-23 Thread Lawrence @ Rogers
Hello all, I noticed recently that our users are getting spam with the subject similar to the following: SehxpyNaturalRedheaddFayeReaganHasHerFirstLesbianExperienceWithBrunet SpamAssassin seems to be having a hard time determining whether it is spam or not because it appears as one long

Re: ALL_TRUSTED

2010-10-23 Thread Bob Proulx
Casartello, Thomas wrote: I'm having an issue with the ALL_TRUSTED rule in SA 3.3.1. I recently rebuilt my server running SA, and now for some reason the ALL_TRUSTED rule is not triggering when a user sends a message using SASL authentication from outside our site. Before it would work when

Re: rule to catch subject spamming

2010-10-23 Thread Lawrence @ Rogers
On 23/10/2010 2:28 PM, Lawrence @ Rogers wrote: Hello all, I noticed recently that our users are getting spam with the subject similar to the following: SehxpyNaturalRedheaddFayeReaganHasHerFirstLesbianExperienceWithBrunet SpamAssassin seems to be having a hard time determining whether it

Re: rule to catch subject spamming

2010-10-23 Thread Karsten Bräckelmann
On Sat, 2010-10-23 at 15:36 -0230, Lawrence @ Rogers wrote: On 23/10/2010 2:28 PM, Lawrence @ Rogers wrote: In all cases, the subject contains no spaces (to prevent detection I would think) and is longer than 62 characters (not sure why they do this, but it is true in every sample I've

Re: rule to catch subject spamming

2010-10-23 Thread RW
On Sat, 23 Oct 2010 14:28:38 -0230 Lawrence @ Rogers lawrencewilli...@nl.rogers.com wrote: Hello all, I noticed recently that our users are getting spam with the subject similar to the following: SehxpyNaturalRedheaddFayeReaganHasHerFirstLesbianExperienceWithBrunet I got some of these