On 12/03/2012 09:43 PM, David F. Skoll wrote:
On Mon, 3 Dec 2012 22:03:25 +0200
Henrik K h...@hege.li wrote:
On Mon, Dec 03, 2012 at 01:54:44PM -0500, Kevin A. McGrail wrote:
[Test loadavg in filtering decisions]
Seems kind of pointless. Have you actually measured how larger
messages
On Tue, 04 Dec 2012 11:12:54 +0100
Andrzej A. Filip andrzej.fi...@gmail.com wrote:
Have you tried/considered scoring based on headers only?
No, and I'm not sure that would be very effective. Our Bayes DB
is extremely effective against message bodies.
Regards,
David.
On Tue, 2012-12-04 at 07:02 -0500, David F. Skoll wrote:
On Tue, 04 Dec 2012 11:12:54 +0100
Andrzej A. Filip andrzej.fi...@gmail.com wrote:
Have you tried/considered scoring based on headers only?
Does anybody have statistics on the type and number of components in
messages that exceed the
Hi,
I've fairly good results with this rule:
header__AJB_OBFU_PR0N_SUBJSubject =~
/[\:\;\/\`\(\)\{\}~\#\\\%\$\_][a-z0-9][\:\;\`\(\)\/\{\}\_\~\#\\\%\$]/im
It's realy basic and desrve a rework.
Best,
Alex, from prypiat.
Yes, I recycle.
On 12-12-04 06:57 AM, Tom Hendrikx wrote:
Hi,
I am using Exim directors to call Spamassassin. I do not scan
messages that come in on port 587 or are in my popb4smtp file. This
was done due to some of those IP's being on DUL blacklists and getting
flagged.
Is there a way to tell SA to skip certain tests if the message came in
on
On Tue, 04 Dec 2012 12:41:55 +
Martin Gregorie mar...@gregorie.org wrote:
Is there an ANSI C MIME encode/decode library that could be bolted
onto spamc?
ripmime: http://www.pldaniels.com/ripmime/ and it's liberally licensed
(BSD revised). I think it's just a decoder, not an encoder, but
On Tue, Dec 04, 2012 at 12:57:39PM +0100, Tom Hendrikx wrote:
Hi,
I'm currently seeing an increasing number of subjects like the ones
below that are not being detected by SA. Looking through the existing
rules (i'm still running v3.3.1) I'm seeing both the GAPPY_SUBJECT and
the
On Tue, 4 Dec 2012, Tom Hendrikx wrote:
Maybe someone is able to refactor GAPPY_SUBJECT into something that hits
on the example below too?
Examples:
Subject: S _C H0^0 L (G. l ^RL S ( P0 |RN_
Subject: H!AR -D C O !R E`
Subject: Un{d}r_es ,s -in {g
Subject: P-0 :R |N . V I)D .E OS {
Subject:
We have a few users who get a lot of emails asking them to report their
webmail usage, often linking to a google spreadsheet. They slip passed
spamassassing, likely because they are translated to swedish, but the
mail is clearly spam.
Is anyone else seeing this and is there some custom rule
On Tue, 4 Dec 2012, Eric Krona wrote:
We have a few users who get a lot of emails asking them to report their
webmail usage, often linking to a google spreadsheet. They slip passed
spamassassing, likely because they are translated to swedish, but the mail is
clearly spam.
Is anyone else
On Tue, 04 Dec 2012 22:37:44 +0100
Eric Krona e...@itomat.se wrote:
We have a few users who get a lot of emails asking them to report
their webmail usage, often linking to a google spreadsheet. They slip
passed spamassassing, likely because they are translated to swedish,
but the mail is
On 12/04, David F. Skoll wrote:
http://sourceforge.net/projects/aper/
Their phishing_links file did have the URL you reported in it:
But did it contain that url at the time he received the email? That seems
to be a very important question with these things.
So all some kind soul needs to
On Tue, 4 Dec 2012 17:42:57 -0500
dar...@chaosreigns.com wrote:
Or a script, similar to their
https://aper.svn.sourceforge.net/svnroot/aper/addresses2spamassassin.pl
which grabs
https://aper.svn.sourceforge.net/svnroot/aper/phishing_links and
converts it to SA rules.
Ah, I didn't know they
I'm guessing they're sending this garbage to everybody who posts.
- Forwarded message from MDaemon at leigh.ssllock.com
mdae...@leigh.ssllock.com -
Date: Tue, 04 Dec 2012 17:19:58 -0600
From: MDaemon at leigh.ssllock.com mdae...@leigh.ssllock.com
Reply-To: nore...@leigh.ssllock.com
To:
On Tue, 4 Dec 2012 18:35:27 -0500
David F. Skoll d...@roaringpenguin.com wrote:
Or a script, similar to their
https://aper.svn.sourceforge.net/svnroot/aper/addresses2spamassassin.pl
Ah, I didn't know they had that! And also wouldn't have guessed
it does the links too; thanks.
Um. It
I have fixed the problem, and submit my most abject apologies.
I apparently am having one of those days where I am doing everything wrong.
Meche
-Original Message-
From: dar...@chaosreigns.com
To: users@spamassassin.apache.org
Date: Tue, 4 Dec 2012 18:41:00 -0500
Subject: Can somebody
16 matches
Mail list logo
