-Original Message-
From: John Hardin [mailto:jhar...@impsec.org]
Sent: 2014-07-28 12:55
To: users@spamassassin.apache.org
Subject: RE: Ready to throw in the towel on email providing...
On Mon, 28 Jul 2014, Greg Ledford wrote:
The only thing that evolves faster than bacteria
98.136.218.139
Host Name: nm12-vm10.bullet.mail.gq1.yahoo.com
Listed on: Sorbs, Spamcop, and Lashback
Causing lots of FPs
Thanks,
Chris Santerre
SysAdmin and Spamfighter
-Original Message-
From: Benny Pedersen [mailto:m...@junc.eu]
Sent: 2013-11-12 13:52
To: users@spamassassin.apache.org
Subject: Re: Heads up, yahoo server on some blacklists!
Chris Santerre skrev den 2013-11-12 19:24:
98.136.218.139
Host Name: nm12-vm10.bullet.mail.gq1
Hypothetically if one were running a reputation system and didn't want to
block all of a TLD like .pw, one could:
Locally cache whois info
create a local rbl
check against a sending domain on the whois info based on both the registrar
and the creation date
Created On:08-May-2013 05:24:04 UTC
I posted this yesterday
for those wanting an SA rule, here:
header PW_IS_BAD_TLDFrom =~ /\.pw\b/
describe PW_IS_BAD_TLDPW TLD ABUSE
score PW_IS_BAD_TLD3
Change score to whatever you want. Enjoy.
--Chris
-Original Message-
From: Michael Orlitzky
The owner is NameCheap, Inc.
A quick google will bring up historical problems with NameCheap and its
owner and its DBAs.
I dare not say anything bad about them and let you judge for yourself on
their history. Richard Kirkendall has a tendency to yell Slander! when
someone even mentions their
, Chris Santerre wrote:
The owner is NameCheap, Inc.
A quick google will bring up historical problems with
NameCheap and its
owner and its DBAs.
I dare not say anything bad about them and let you judge
for yourself on
their history. Richard Kirkendall has a tendency to yell
Slander
10 days and still being abused badly. Recommending for everyone to just
refuse any .pw
for those wanting an SA rule, here:
header PW_IS_BAD_TLDFrom =~ /\.pw\b/
describe PW_IS_BAD_TLDPW TLD ABUSE
score PW_IS_BAD_TLD3
Change score to whatever you want. Enjoy.
--Chris
just passing the info along :)
Thanks,
Chris Santerre
SysAdmin and Spamfighter
I'm just curious this morning. I see a dip in spam trapped, but a pretty big
rise in blocking. I expected a lot worse over the long holiday weekend. Did
someone get arrested or something?
I'm not fully awake yet but it looks like my blocking numbers from RBLs
tripled over weekend.
--Chris
This just becomes increasingly important when management drops an
email in the Put Spam Here folder for training that clearly isn't
spam, but something they've subscribed to, like a newsletter. For the
email that even I question sometimes, I'd like to be able to give them
a definitive answer
-Original Message-
From: Ted Mittelstaedt [mailto:t...@ipinc.net]
Sent: 2009-10-10 02:40
To: Marc Perkel
Cc: users@spamassassin.apache.org
Subject: Re: SA needs a new paradigm for rule structure
Marc Perkel wrote:
I've brought this idea up over the years but I'll try to
-Original Message-
From: jdow [mailto:j...@earthlink.net]
{^_-} (Some of the ninjas are burned out. I have one such to my
back when we're both in the room beating away at our CPUs.)
+1 burnout. Too many things going on. Will eventually get my 232nd wind and
be back in
I don't normally cross post, but this is kind of MAJOR news. For those who
don't know, SPAM-L has been what I consider an anchor in the anti-spam
community since long before I got interested in a clean Inbox. This is a
very dark day indeed. :-(
Monday, 11 May 2009 it goes silent.
--Chris
As of right now they are not being updated. But still being used, even by
myself.
--Chris
-Original Message-
From: Marcin Krol [mailto:mrk...@gmail.com]
Sent: 2008-12-19 06:35
To: users@spamassassin.apache.org
Subject: Adding SARE rules
Hello everyone,
1. First of all, as
-Original Message-
From: u...@3.am [mailto:u...@3.am]
Sent: 2008-12-17 23:16
To: SA Mailing list
Subject: Re: remove SURBL rules
On Wed, 17 Dec 2008, LuKreme wrote:
On 16-Dec-2008, at 23:57, ram wrote:
http://www.surbl.org/usage-policy.html
I did the 'request a
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: 2008-04-23 10:48
To: Marc Perkel
Cc: users@spamassassin.apache.org
Subject: Re: Looking for hosts to white list
Marc Perkel writes:
Yep - one of the ideas I originated here is this list is the idea
thousands of hours per year on it, undergo
constant threats
of DDOs or worse, and listen to complaints if you dare to consider
being partially paid for your work.
Jeff, ... I think I might love you again. :)
--Chris Santerre
(Who an I kidding, I never stopped loving you!)
71.920 77.1604 1.23310.984 0.710.00 URIBL_BLACK
You've always surprised me with your Ham rates Theo. I'm guessing these are
prbly good sites that fell into the affiliate spam category and got
listed. Anyway to pull out the top hitters of Ham and let us know. I'd like
to find out
the spams you are looking for, IMHO the FP rate
will be quite high. I would avoid using * and try to place boundries in this
rule. In short, no way I would use this on my system. Just my opinion.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
As far as blacklisting entire registrars, can you
tell us any registrars that are 100% bad? I can't.
Jeff C.
Allegedly 100% spam. Innocent until proven guilty, ect.
NUCLEAR NAMES, INC.
RED PILLAR, INC.
MOUZZ INTERACTIVE INC.
NAMEVIEW, INC.
SOLID HUB, INC.
COMPANA, LLC
RED
-Original Message-
From: Jeff Chan [mailto:[EMAIL PROTECTED]
Sent: 2008-01-10 05:14
To: users@spamassassin.apache.org
Subject: Re: Googlepages Livefilestore spams
Quoting Justin Mason [EMAIL PROTECTED]:
Theo Van Dinter writes:
On Wed, Jan 09, 2008 at 11:18:40PM +0100,
-Original Message-
From: Joseph Brennan [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 16, 2007 2:49 PM
To: users@spamassassin.apache.org
Subject: RE: uribl.com implementing ACLs
No donations
IT departments managed by folks with corporate backgrounds don't even
have a
Since the last DDOS it would have been nice if the big guys ran local
mirrors instead of making the problem worse. No donations and hammering away
at the server I wonder why small RBLs drop off the planet.
I salute every one who has donated time, machines, banwidth, and love to
URIBL. The
-Original Message-
From: Jason Bertoch [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 12, 2007 8:54 AM
To: users@spamassassin.apache.org
Subject: FW: List of 700,000 IP addresses of virus infected computers
On Tuesday, September 11, 2007 7:07 PM Marc Perkel wrote:
The
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 12, 2007 8:33 AM
To: users@spamassassin.apache.org
Subject: SpamAssassin wins 2007 InfoWorld Best of Open
Source Software
award
I'm happy to announce that we have won an InfoWorld
Based on your example unplug the computer.
--Chris
(How did the Porsche suddenly get understeer?)
-Original Message-
From: Sg [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 31, 2007 11:58 PM
To: users@spamassassin.apache.org
Subject: .htm spam files
Hi
I am getting .htm spams.
This MY_CID.. rules are part of 70_sare_stocks_cf
Had to these problems, I am considering to disactivate
these ...CID..
rules.
CID means that the email contains an inline image.
STYLE indicates a pair of empty style tags
ARIAL2 is a 2 point arial font tag
So this means
You didn't miss anything. I don't believe they are released yet. FInal
testing being done. Results look great. I'll see if they can get released
soon.
--Chris
-Original Message-
From: Michal Jeczalik [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 03, 2007 9:47 AM
To:
in for assistance. Scottie has given
us more power, but is not sure she will hold together much longer. All the
while Ensen Alex won't stop dancing with a half naked green lady!
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Anyone else having trouble getting to uribl ?
www not coming up. I hope we aren't seeing another anti-spam
casualty. :-(
I unplugged the server so I could play Forza 2 on the 360 at work. I'll plug
it back in after this endurance race. :)
I'm kidding...
I'll prbly keep
-Original Message-
From: Giampaolo Tomassoni [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 20, 2007 2:10 PM
To: users@spamassassin.apache.org
Subject: __AOL_FROM is too American?
Dears,
the __AOL_FROM rule in the 20_ratware.cf file from the
spamassassin ruleset
looks for
I haven't seen a porn spam in about a year! Hard to write rules when I don't
have any. I'm pretty sure I got listwashed and RBL Rejects take care of the
rest.
--Chris
-Original Message-
From: Loren Wilton [mailto:[EMAIL PROTECTED]
Sent: Tuesday, May 01, 2007 1:35 PM
To:
for that address. How do you call SA?
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
.
And CRAP! I forgot about the MIT conference!! :(
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
, no direct plugin for host IPs. You have to use URIBL and SURBL
lookups. But the time from initial spam run to being listed is pretty quick.
The IP you listed has been watched for over a month now. ;)
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
-Original Message-
From: Paul Hutchings [mailto:[EMAIL PROTECTED]
Sent: Monday, February 26, 2007 5:47 AM
To: users@spamassassin.apache.org
Subject: Mail Appliances?
Appreciate this may not be 100% the best place to ask, but I'm
struggling to think of anywhere better other
-Original Message-
From: Andy Figueroa [mailto:[EMAIL PROTECTED]
Sent: Friday, February 09, 2007 9:31 AM
To: SpamAssassin Users List
Subject: More stock spam + strange cf files
These guys are just rolling in scott free except for bayes.
See http://2chronicles36.org/stock.txt
These guys are just rolling in scott free except for bayes.
See http://2chronicles36.org/stock.txt
I'm using 3.1.7 with latest sa-update + FuzzyOCR.cf KAM.cf
I must say, that a pretty well done spam. Whoever wrote it put some
thought
into the phrasing. This one might take a
There is exactly that. Called the SARE team. No one knows who they are, or
where they are. Some say its actually the famous driver, Stig.
You're new here, so the ninjas will not visit you during the night...at
least...not this time. ;)
Thanks,
Chris Santerre
SysAdmin and Spamfighter
pointless.
Find other spam flags.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Dan Barker wrote:
Well, if I were a Spammer, I'd study the rules (du jour, SARE,
sa-update), every day and work around the rules that hit my
content.
I'd not bother trying to decode the threads on this list.
However, I'm
not a spammer, so maybe they do something different.
of what
you're attempting to do.
This is exactly how I do it.
Sendmail + procmail + SpamAssassin = a force so powerful, even Rosie
Odonnell must bow to it!
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
-Original Message-
From: Rob McEwen (PowerView Systems) [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 10, 2007 2:14 PM
To: users@spamassassin.apache.org
Subject: Q: **other** good general Spam/Mail Admin Lists?
RE: Questiona bout **other** good general Spam/Mail Admin
of this. Its sure to FP on
emails.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
have a bad word in an email, doesn't mean it isn't legit.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
(Gears of War for the Xbox 360 kicks ass! It F'n rocks!)
.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
- Sandstorm*
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
-Original Message-
From: Loren Wilton [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 12, 2006 6:12 AM
To: users@spamassassin.apache.org
Subject: Re: question to SARE_URI_EQUALS
It's looking for an equal sign in the hostname/domain name, such as
http://www.foo=bar.com/blah.
Yeah this slipped thur as well. Just write a rule for the phone number. I'll
see about getting 70_sare_specific.cf updated for this number.
--Chris
-Original Message-
From: Jon D. Slater [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 29, 2006 9:17 AM
To:
]
As always, no need to thank me. Just go watch or play ice hockey and call it
even ;)
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Given that spammers read this list to figure out how to defeat us...
Why don't we just secure a copy of ratware and engineer a retro-virus
for it?
There are plenty of ratware copies floating around. ;)
Its not that hard to get good phrases. Spammers can use spamassasin for
that! Bayes,
Out of total mail hitting our server 12.99% is legit and delivered. You read
correctly, 12.99%!!
65% is rejected at MTA w/ RBLs
21% is caught by Spamassassin and not delivered.
12.99% is legit and delivered.
0.01% is spam that sneaks thru and delivered
HTH,
Chris Santerre
SysAdmin
-Original Message-
From: Jim Maul [mailto:[EMAIL PROTECTED]
Sent: Monday, November 27, 2006 12:12 PM
To: Chris Santerre
Cc: users@spamassassin.apache.org
Subject: Re: Percentage of email that is spam after filtering?
Chris Santerre wrote:
Out of total mail hitting our server
-Original Message-
From: Jim Maul [mailto:[EMAIL PROTECTED]
Sent: Monday, November 20, 2006 2:36 PM
To: spamassassin
Subject: Re: Not all Stock Spam is bad
DAve wrote:
Randal, Phil wrote:
With FuzzyOCR 3.4.2 and using ocrad,
$ocrad -s5 -i $pfile
should catch them,
the weekend.
Stay tune for the update :)
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
-Original Message-
From: John Tice [mailto:[EMAIL PROTECTED]
Sent: Monday, November 20, 2006 9:02 AM
To: users@spamassassin.apache.org
Subject: Adding new rules
We've all got at least one. We've been talking about it on other lists.
Either a goof or a spammer got haxored.
The real question is, how soon before we see You one a free Playstation 3!
spam? :-)
--Chris
(No, I didn't wait in line for one. )
-Original Message-
From: Jim Maul [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 16, 2006 1:51 PM
To: twofers
Cc: users@spamassassin.apache.org
Subject: Re: Rules Du Jour briken?
twofers wrote:
Is this link having problems that anyone knows of?
of this simple thing as the spammer trying to keep you
from looking at the other flags to tag on.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
-Original Message-
From: Raquel [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 16, 2006 3:33 PM
To: users@spamassassin.apache.org
Subject: Re: Rules Du Jour briken?
On Thu, 16 Nov 2006 15:28:06 -0500
Chris Santerre [EMAIL PROTECTED] wrote:
-Original Message
That
is WAY too big of a sting to look for. Rawbody doesn't handle line breaks
either. Maybe a bunch of meta rules would be better?
Thanks,
Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com
-Original Message-From: Tim Macrina
[mailto:[EMAIL
a rule and submitting it to SA devs!
IMHO, all of this could have been avoided if you had just kept the old SA logo ;)
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: Well, that didn't take very bloody long
-Original Message-
From: Steve Lake [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 10, 2006 12:52 PM
To: users@spamassassin.apache.org
Subject: Well, that didn't take very bloody long
Ok, remember that Name Wrote: :)
:
Jim Maul wrote:
Even worse! But (excuse my stupidity) where was the word
putz in my
email? I sure as hell didnt type it.
Jim Maul wrote:
Chris Santerre wrote:
Can anyone find any common elements in these emails
because whoever this putz is, they're adapting a lot.
haha damn
a corpus of it, but I'll try to save any new ones that come in.
I'll double check, but I think I wrote my own rules to counter these FPs. Which may be why I don't have any in my traps.
HTH,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: SA filter load: massive increase
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 08, 2006 5:00 AM
To: Garry Glendown
Cc: Matt Kettler; users@spamassassin.apache.org
Subject: Re: SA filter load: massive increase
Title: RE: IncrediMail?
-Original Message-
From: John D. Hardin [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 08, 2006 1:05 PM
To: Dylan Bouterse
Cc: users@spamassassin.apache.org
Subject: RE: IncrediMail?
On Wed, 8 Nov 2006, Dylan Bouterse wrote:
Would it be a
the best idea for a large ISP, but for companies I see no problem rejecting on RBLs when you have a trained administrator.
So I am getting what I deserve, and I love it.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
a procmailrc file in the mailbox's
home directory to do this, but can't seem to find out
exactly how to do it.
edit the file? vi? pico is my favorite.
Can you post the procmail file that is called?
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: mcafee-spamassassin-rules
-Original Message-
From: Theo Van Dinter [mailto:[EMAIL PROTECTED]]
Sent: Friday, October 27, 2006 3:36 PM
To: users@spamassassin.apache.org
Subject: Re: mcafee-spamassassin-rules
On Fri, Oct 27, 2006 at 01:38:32PM -0400, Chris Santerre
Title: RE: Age of a domain name - a new test?
Its also one of the MANY things we look at for URIBL submissions.
--Chris
Title: RE: Age of a domain name - a new test?
-Original Message-
From: John D. Hardin [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 30, 2006 3:30 PM
To: Chris Santerre
Cc: Wolfgang Uhr; users@spamassassin.apache.org
Subject: RE: Age of a domain name - a new test
Title: RE: mcafee-spamassassin-rules
It's also worth noting that hypothetically, if I was a
company releasing
updates based on an open-source product, I may have incentive to avoid
making those updates useful on said product, otherwise people would
download my updates and not pay me
?
Since this is also scaned by body rules... No.
However you could just rescore the rule
score SUBJ_ILLEGAL_CHARS 0.10
HTH,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: spamassassin --lint fails with rules in local.cf
-Original Message-
From: Dylan Bouterse [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 26, 2006 8:35 AM
To: users@spamassassin.apache.org
Subject: spamassassin --lint fails with rules in local.cf
I have added
list-unsubscribe: mailto:[EMAIL PROTECTED]
Seriously, this
gets posted once a week. I think new subscribers should sign a a contract that
states they KNOW how to unsubscribe, BEFORE the subscribe.
And having
someone click on a link with a jsp script in it to see your terms of service, is
Title: [OT] Stats up drastically from a year ago.
Just for giggles! Keeping exact numbers out of it, here are the stats compared to a year ago:
RBL blocks up 3 fold!
Spam caught by SA doubled.
Legit email traffic also doubled.
Whe, what a year!
Thanks,
Chris Santerre
SysAdmin
Title: RE: Spam using local newspapers
-Original Message-
From: Maurice Lucas [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 23, 2006 2:54 AM
To: users@spamassassin.apache.org
Subject: Spam using local newspapers
Hello,
I receive some spam today using parts of local
believe spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED] Too bad for them...they do not. :)
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: Psst!
-Original Message-
From: Mark Johnson [mailto:[EMAIL PROTECTED]]
Sent: Friday, October 20, 2006 10:41 AM
To: users@spamassassin.apache.org
Subject: Re: Psst!
Chris Santerre wrote:
Just curious, but how many people see spam being sent to usersnames
still tell your boss you were hard at work all morning working on the spam problem :)
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
of the new sarstock rulesthat it hits
right?
# Chris
Santerre# SpamAssassin RulesEmporium (SARE)## Salty Stock
Rules# 10/18/06# Version: 2.51## These rules have been
tested.# They are meant to catch stock spams with inline gifs## [EMAIL PROTECTED]
rawbody
__MY_CID /src\=\&quo
Title: RE: Psst!
-Original Message-
From: [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 19, 2006 10:48 AM
To: Giampaolo Tomassoni; users@spamassassin.apache.org
Subject: Re: Psst!
Any suggestion to spread a spamtrap e-mail address?
Plase, don't let 'em
,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: Help filtering this type of spam
The new update to SARE stock ruleset will take care of these. I'm just waiting on the ninja in chage of that to update it. I'm running it, and I love it ;)
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: SA 3.1.7 children hang but don't die
Subject: SA 3.1.7 children hang but don't die
I'm not running 3.1.7 yet. But with a subject tag like that, you're lucky if you don't have the FBI knocking on your door! :)
The Carnivore Admin must be laughing!
--Chris
Title: RE: I'm getting killed with spammers
FWIW: I think traffic is up all around. I'm seeing a definite increase in the past weeks. Most are being stopped via RBLs, but there is a lot more to stop!
--Chris
Title: RE: SA method for identifying animated GIFs?
-Original Message-
From: Russ Ringer [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 18, 2006 11:46 AM
To: users@spamassassin.apache.org
Subject: SA method for identifying animated GIFs?
Hi,
Has anyone come up with
what spammers are going to send, before they send it, please let us know about it.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: SA method for identifying animated GIFs?
-Original Message-
From: Russ Ringer [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 18, 2006 12:46 PM
To: users@spamassassin.apache.org
Subject: Re: SA method for identifying animated GIFs?
On Wed, 18 Oct 2006
Title: RE: sa-update versus rulesdujour questions
Hm. I'm surprised on no answers. Can I persist? This topic
is of real
interest to me...
Last month this topic blew up into a flame fest. I compltely understand why no on wants in on this again.
Short answer: use what you like.
Title: [SARE] Stock rules updated
Just making official anouncment in case you missed it in the other thread. SARE stock rules have been updated.
http://www.rulesemporium.com/rules/70_sare_stocks.cf
I'm working on getting the website date changed :)
Enjoy!
Thanks,
Chris Santerre
Title: RE: rulesemporium.com expired
Trying to get resolved now. Posting it to the SATALK list might not have been the best idea!
--Chris
-Original Message-
From: Martin Hepworth [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 17, 2006 6:58 AM
To: SpamAssassin Users
Title: RE: This image is turning frequent..
This type of image spam is getting more common, and is not
detected.. At
least not here..
A solution is on its way :) Stay tuned..
Might be end of day.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
Yes...
and here is the answer:
an alias can be a
procmail script. So you send the email to this aliased procmail script, have it
scanned, and depending on the outcome of the scan, proceed to forward to the
real alias, or do something else with the spam.
Thanks,
Chris Santerre SysAdmin
Title: RE: This image is turning frequent..
Exactly... and that SARE ruleset is coming very soon :)
--Chris
-Original Message-
From: Jo Rhett [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 17, 2006 1:28 PM
To: Kelson
Cc: users@spamassassin.apache.org
Subject: Re: This
Title: RE: Having issue with a type of spam I havn't seen before
I'm just waiting for some votes before I release the SARE ruleset for these guys. I finally believe I got it nailed down.
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
Title: RE: This image is turning frequent..
-Original Message-
From: Jo Rhett [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 17, 2006 2:41 PM
To: Chris Santerre
Cc: users@spamassassin.apache.org
Subject: Re: This image is turning frequent..
Chris Santerre wrote:
I'm
.
Be on the lookout!
Thanks,
Chris Santerre
SysAdmin and Spamfighter
www.rulesemporium.com
www.uribl.com
s
-Original Message-From: Chris Santerre
[mailto:[EMAIL PROTECTED]Sent: Thursday, October 12,
2006 11:43 AMTo: SaTalk (E-mail)Subject: New ebay
phish
New phish looks like a LEGIT ebay messege from
another user
"I'm still
waiting payment for my item for about 1 week. W
1 - 100 of 524 matches
Mail list logo
