Title: RE: Tricky University spam
Hey all!
So I can't seem to stop this spam. All it is are a bunch of random
words then a gif file. Below is an example of the words:
cocky may spice a drove not omit it silas or allegheny not
arcadia try obstinacy it heft but essay may lamb and
Title: RE: URIBL_SBL
-Original Message-
From: Cami [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 02, 2006 9:45 AM
To: Spamassasin Users List
Subject: Re: URIBL_SBL
Dojja wrote:
Cami wrote:
A specific message is hitting the following rule:
* 5 URIBL_SBL
Title: RE: Automatically Updating Rules on Windows
All three of you should add them to the www.exit0.us wiki!!
And also, bring me a shrubery!
--Chris
-Original Message-
From: Jeremy [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 02, 2006 4:25 AM
To:
Title: RE: SpamAssassin tested by lwn.net
Michael Monnerie wrote:
http://lwn.net/SubscriberLink/173910/e7bf95a7cb044637/
They are wondering why bayes_99 is not given 5 points by
default, as it
seems to have no FP.
Disregarding the excellent explanation JMason gave, there
Title: RE: How easy is Spam Assassin really?
Do you have to constantly tune your rules? How often do you
need to do
this for it to be effective?
Some honest feedback and maybe a link or two would be helpful.
Implementing SA on a win32 doesn't seem like it'd be too
difficult,
Title: RE: How easy is Spam Assassin really?
-Original Message-
From: Herb Martin [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 24, 2006 12:25 PM
To: 'SpamAssassin Users'
Subject: RE: How easy is Spam Assassin really?
-Original Message-
From: Bret Miller
to be able to search all the SARE rules for a given phrase. Kind of hard as a lot is just regex code.
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
Title: RE: Own HAM Rule doesn't work
-Original Message-
From: Muenz, Michael [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 22, 2006 3:57 AM
To: users@spamassassin.apache.org
Subject: Re: Own HAM Rule doesn't work
Hi,
maybe the rule is missing the which encloses
Title: RE: Pling pling, many exclamations, and Yahoo!
-Original Message-
From: Philip Prindeville [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 21, 2006 9:45 PM
To: users@spamassassin.apache.org
Subject: Pling pling, many exclamations, and Yahoo!
I was noticing that
, to [EMAIL PROTECTED].
--j.
My company isn't technology based, and uses it. But that might be a little skewed if I do commentary :)
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
Title: RE: SpamAssassin large-scale users willing to comment?
-Original Message-
From: Kristopher Austin [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 22, 2006 2:26 PM
To: [EMAIL PROTECTED]; users@spamassassin.apache.org
Subject: RE: SpamAssassin large-scale users
Title: RE: Updated Pump and Dump rules. 2006-02-18
-Original Message-
From: Bob McClure Jr [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 21, 2006 9:37 AM
To: users@spamassassin.apache.org
Subject: Re: Updated Pump and Dump rules. 2006-02-18
On Tue, Feb 21, 2006 at
Title: RE: Updated Pump and Dump rules. 2006-02-18
-Original Message-
From: Bowie Bailey [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 21, 2006 12:27 PM
To: users@spamassassin.apache.org
Subject: RE: Updated Pump and Dump rules. 2006-02-18
Chris Santerre wrote:
From
Title: RE: Over-scoring of SURBL lists...
I'm still catching up on this thread, but I have some points:
1) Matt's taking a beating, and he shouldn't be. I see his concerns. I might not agree, but he has legitimate reasons for bringing it up, and only serves to help all of us.
2) Perhaps
Title: RE: Over-scoring of SURBL lists...
-Original Message-
From: mouss [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 17, 2006 1:28 PM
To: jdow
Cc: users@spamassassin.apache.org
Subject: Re: Over-scoring of SURBL lists...
SNIP
also, when someone's filter misses spam,
-0500, Chris Santerre wrote:
Wow this exploded big :) Yeah after I sent it, I thought,
Was this a user
or the list?
Argh! SO bad. See not only is the NHL on break for
Olympics, but MY mens
league got canceled until April because our ice rink caught fire.
Not to mention how your team
Title: RE: Over-scoring of SURBL lists...
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 15, 2006 6:27 PM
To: users@spamassassin.apache.org
Subject: Over-scoring of SURBL lists...
All this hubub about not filtering the list has
Title: RE: Over-scoring of SURBL lists...
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 16, 2006 3:36 PM
To: List Mail User
Cc: [EMAIL PROTECTED]; users@spamassassin.apache.org
Subject: Re: Over-scoring of SURBL lists...
List
Title: RE: Stock image woes
-Original Message-
From: [mailto:[EMAIL PROTECTED]]
Sent: Saturday, February 11, 2006 10:56 AM
To: users@spamassassin.apache.org
Subject: Stock image woes
All,
Is anybody having any luck with the Stock spam that consists
of an image
Title: RE: Stock image woes
-Original Message-
From: Craig Baird [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 15, 2006 11:52 AM
To: Chris Santerre
Cc: users@spamassassin.apache.org
Subject: RE: Stock image woes
Quoting Chris Santerre [EMAIL PROTECTED
Title: RE: Stock image woes
Ahhh.I just caught the morph in this new series of spams. I'll write and test a new rule for it. Thanks for the examples.
--Chris
-Original Message-
From: Craig Baird [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 15, 2006 1:07 PM
To:
Title: DO NOT Filter this list!!!
Come on guys. You can't spam filter a list that talks about spam. Expect to see examples posted. Either stop filtering this list, or unsubscribe.
- The following addresses had permanent fatal errors -
users@spamassassin.apache.org
(reason: 552
Title: RE: DO NOT Filter this list!!!
-Original Message-
From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 15, 2006 3:37 PM
To: Chris Santerre
Cc: 'users@spamassassin.apache.org'
Subject: Re: DO NOT Filter this list!!!
Chris Santerre wrote
since we had a push for additions.
http://wiki.apache.org/spamassassin/
and
http://www.exit0.us/
Your chance to preserve your helpful info in the anals of history. (That almost sounds painful!)
Thanks!
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
Title: RE: General assistance
-Original Message-
From: DAve [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 14, 2006 3:14 PM
To: users@spamassassin.apache.org
Subject: Re: General assistance
Chris Santerre wrote:
I would like to make a quick comment to everyone who
that they are contained in a spam. But hey! A+ for effort! Its a start, and it will always get better.
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
-Original Message-
From: Kristopher Austin [mailto:[EMAIL PROTECTED]]
Sent: Friday, February 10
words like that doesn't really mean it is spam. So its kind of tough to nail it down. Heck, my ice hockey team email shave a lot more profanity then that :) Although none of my team members have asked my to tit screws them.
Thanks to URIBL and SURBL we don't really worry about these much.
Chris
missing, it is common to give us an actual sample of it! :) I can't fix what I can't see. I've tried. I really have. Which is why my car is currently FUBAR :)
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
SARE_GENLSUBJ0
SARE_HTML0
SARE_HEADER0
SARE_OBFU0
SARE_RANDOM
SARE_SPECIFIC
SARE_SPOOF
SARE_STOCKS
SARE_UNSUB
SARE_URI0
SARE_WHITELIST_SPF
SARE_WHITELIST_RCVD
Boy those SARE people sure rock! ;)
Don't forget to use URIBL and SURBL Joey. They will stop a ton of spam.
Chris Santerre
SysAdmin
Title: RE: RulesDuJour Recommendation
Yea...those are really good. I didn't mention them as they
are enabled
by default in the latest SA versions. At least, they are if
the network
tests in general are enabled.
URIBL isn't on by default. Just SURBL. I believe the next SA release
Title: FW: META: [EMAIL PROTECTED]: Norman De Forest - sad news]
This is extremly sad news. Those that dealt with Norman, know what a great help he was. He will be greatly missed.
Posted to SPAM-L
- Forwarded message from Ant [EMAIL PROTECTED] -
From: Ant [EMAIL PROTECTED]
subscriber
services. While this site is heavily ad laden, it is a
subscriber service.
Please fire an email to me if you come across an FP like this. I'll check it out ASAP. Your 1 in 500 is unacceptible to me :)
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http
Title: RE: Pump and Dump SARE rules
-Original Message-
From: Doc Schneider [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 27, 2006 5:14 PM
To: users@spamassassin.apache.org
Subject: Pump and Dump SARE rules
http://rulesemporium.com/rules/70_sare_stocks.cf
Is the
for our company. Obviously I'm partial to URIBL.com and SARE rules ;) I get about 98% of spam caught, and little FPs.
This is going to sound like tooting our own horn, but so be it. Before SARE, Bayes was cool. After SARE, I see no need.
Chris Santerre
SysAdmin and SARE/URIBL ninja
http
Title: RE: Google search as spam URI
-Original Message-
From: Dhawal Doshy [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, January 04, 2006 3:01 PM
To: Dallas L. Engelken
Cc: Jeff Chan; SpamAssassin Users; SURBL Discuss
Subject: Re: Google search as spam URI
Dallas L.
Title: RE: A thought about phone numbers and URIBLs
-Original Message-
From: Craig McLean [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 10, 2005 9:58 PM
To: users@spamassassin.apache.org
Subject: Re: A thought about phone numbers and URIBLs
-BEGIN PGP SIGNED
it is the opposit to the krisskind, hwo visits good children,
he wisits the bad children on the scond advent, and hits them ...
Who's got the email addy for DCYF? :)
Well I just learned something today!
--Chris (A lazy american wondering when the heck the second advent is? )
SARE_UNSUB
If anyone gets some juicy things that miss unsub, send them my way. I
haven't seen spam in any decent number in quite a long time.
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
-Original Message-
From: Rosenbaum, Larry M. [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 09, 2005 10:45 AM
To: users@spamassassin.apache.org
Subject: RE: More spam getting through
From: Loren Wilton [mailto:[EMAIL PROTECTED]
I'm not sure if Loren's rules made it
-Original Message-
From: Robert Menschel [mailto:[EMAIL PROTECTED]
Sent: Wednesday, November 02, 2005 9:01 PM
To: Martin Hepworth
Cc: users@spamassassin.apache.org
Subject: Re: lint failure on RDJ for 2nd day.
Hello Martin,
Wednesday, November 2, 2005, 12:57:22 AM, you
behind the ears.
SARE is about to release a stock ruleset. Looks really good. I was going to
work on one, Then I saw the ninjas have it under control, and I'm just
sitting back and watching the fun. Not sure on the release date. but to
quote every software company ever, Soon. :)
Chris Santerre
-Original Message-
From: Ramprasad A Padmanabhan [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 18, 2005 9:53 AM
To: Spamassassin
Subject: Managing a personal SURBL list
Hi all,
We are running spamassassin 3.1 with Mailscanner. The SURBL
checks are
very efficient in
-Original Message-
From: Dhawal Doshy [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 18, 2005 4:34 PM
To: Spamassassin
Subject: Re: Managing a personal SURBL list
Chris Santerre writes:
-Original Message-
From: Ramprasad A Padmanabhan [mailto:[EMAIL PROTECTED
-Original Message-
From: MATSUDA Yoh-ichi [mailto:[EMAIL PROTECTED]
Sent: Monday, October 10, 2005 4:12 PM
To: [EMAIL PROTECTED]
Cc: users@spamassassin.apache.org
Subject: Re: Explosion in uk.geocities.com spam
Hello.
From: Loren Wilton [EMAIL PROTECTED]
Subject: Re:
-Original Message-
From: Dawn Keenan [mailto:[EMAIL PROTECTED]
Sent: Monday, October 03, 2005 3:36 PM
To: [EMAIL PROTECTED]
Cc: users@spamassassin.apache.org
Subject: Re: Anyone seeing this FP?
I'd think sprint would take care of the missing SUBJECT
header and Messege
ID!
Message-Id was added by a relay
I'd think sprint would take care of the missing SUBJECT header and Messege
ID! Isn't that an RFC requirement? Or just common email curtesy?
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
-Original Message-
From: Chris Thielen [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 07, 2005 2:03 PM
To: Matthew Newton
Cc: users@spamassassin.apache.org
Subject: Re: Backhair ruleset and current Microsoft e-mail
Matthew Newton wrote:
Hi,
Just had to remove the
-Original Message-
From: Anthony McCarthy [mailto:[EMAIL PROTECTED]
Sent: Monday, August 22, 2005 6:40 PM
To: users@spamassassin.apache.org
Subject: question on meta rules
Is there something special about meta rules?
Could someone explain what appear to be anomolies between
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, August 12, 2005 4:54 AM
To: users@spamassassin.apache.org
Subject: Re: Phishing IP listed in URIBL and SURBL, but not triggering
URI rules
Just that nobody forgets:
What about false positives?
-Original Message-
From: wolfgang [mailto:[EMAIL PROTECTED]
Sent: Thursday, August 11, 2005 2:56 PM
To: users@spamassassin.apache.org
Subject: Re: Phishing IP listed in URIBL and SURBL, but not triggering
URI rules
In an older episode (Thursday, 11. August 2005 12:31), Jeff
Negative ghostrider!
We aren't getting the ip. We are taking the ip directly from the URL, not
doing a reverse lookup. I haven't seen a legit email use an IP in a URL in
ages. And even if it was legit, it would have to be listed in URIBL.
Again, no reverse lookups being done. Just using what is
Google
searching on terms only brings up a link to this:
http://UF.vrv.valuehomeway.com/i7f/
http://www.spamhaus.org/SBL/sbl.lasso?query=SBL28542
HTH,
--Chris
-Original Message-From: Ryan L. Sun
[mailto:[EMAIL PROTECTED]Sent: Wednesday, August 10, 2005 1:08
PMTo:
-Original Message-
From: Mathieu Bouchard [mailto:[EMAIL PROTECTED]
Sent: Saturday, July 30, 2005 2:02 AM
To: SpamAssassin Users
Subject: PHD comic strip
Spam Filtering gets a (neat) mention in the PHD comic strip:
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 27, 2005 10:05 AM
To: users@spamassassin.apache.org
Subject: RE: New open http redirector?
Chris Santerre wrote:
If they want ad tracking they can simply use gifs.
? Clarify please
: Chris Santerre [EMAIL PROTECTED]
Do you mean this script?
http://www.rulesemporium.com/programs/sa-stats.txt
Note: It may be named the same as sa-stats.pl, but it is
different. Per
rule based.
Another Dallas miracle!
Oh? Er, how does it determine if a message was ham
-Original Message-
From: Kai Schaetzl [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 27, 2005 2:31 PM
To: users@spamassassin.apache.org
Subject: Re: New open http redirector?
Chris Santerre wrote on Wed, 27 Jul 2005 10:08:21 -0400:
If they want ad tracking they can simply
OK something is wrong with your setup!
Sample 1 from a cron job:
Subject: [SPAM] Cron [EMAIL PROTECTED] /usr/bin/nice -20
X-Spam-Flag: NO
--
Marked as spam but not?
Sample 2
Headers:
Subject: [SPAM: score=5.4/5.0] spam
Also, post the whitelist entry you're using... And what
file it's in, and how
you're calling SA.
Whitelist from user/.spamassassin/user_prefs:
NEVER post other peoples' email addresses to a public and archived list!!!
Deep breaths Doc!
--Chris
score gtube 4.0
score razor2_check4
score RAZOR2_CF_RANGE_11_50 4
score RAZOR2_CF_RANGE_51_100 4
score DCC_CHECK 5
score PYZOR_CHECK 5
score REMOVE_IN_QUOTES4
score CLICK_TO_REMOVE_2 4
score ASCII_FORM_ENTRY4
score TRACKER_ID 4
*snip*
Holy
-Original Message-
From: Kelson [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 27, 2005 4:59 PM
To: 'users@spamassassin.apache.org'
Subject: Re: New open http redirector?
Chris Santerre wrote:
My point is whatever code/script the redir is running to
generate tracking
IDs
MTA logs.
Do you mean this script?
http://www.rulesemporium.com/programs/sa-stats.txt
Note: It may be named the same as sa-stats.pl, but it is different. Per rule
based.
Another Dallas miracle!
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
what
they say. If its no big deal, then sure, we would have no problem with a
test file.
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
-Original Message-
From: Menno van Bennekom [mailto:[EMAIL PROTECTED]
Sent: Friday, July 15, 2005 10:41 AM
To: users@spamassassin.apache.org
Subject: Re: this receive line only in spam
FYI,
I got another receive line here that occurs only in spam,
with always the
same
-Original Message-
From: Kai Schaetzl [mailto:[EMAIL PROTECTED]
Sent: Friday, July 15, 2005 1:15 PM
To: users@spamassassin.apache.org
Subject: Re: this receive line only in spam
Chris Santerre wrote on Fri, 15 Jul 2005 11:59:33 -0400:
That subnet is listed in spews. Block
or Automated
Scoring System.
So you just asked, How often should I clean my ASS?
Well...do you really want my answer? :)
Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com
Unplug
the power to the server.
If
that fails, I assume you would need to contact the person that set it up. You
sysadmin could allow all your email to come thru without being scanned.
I hope
that helps,
Thinking of you,
Tom
Cruise
-Original Message-From: Michael
Title: Bypass URI check
I'm thinking
it may be time for SARE to look at this phrase:
"then copy //
paste the below page into your window:
"
I'll see what I can
do with it.
--Chris (I also love
the black ;)
-Original Message-From: [EMAIL PROTECTED]
[mailto:[EMAIL
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, July 08, 2005 12:34 PM
To: Matthew Newton
Cc: users@spamassassin.apache.org
Subject: Re: Regular expression whoops
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Matthew Newton writes:
Hi,
OK, so
-Original Message-
From: jdow [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 07, 2005 10:33 PM
To: users@spamassassin.apache.org
Subject: Re: Tsunami warning hits the spam barrier
From: Gene Heskett [EMAIL PROTECTED]
On Thursday 07 July 2005 21:15, Daryl C. W. O'Shea wrote:
Justin
Or you could use user aliases to local procmail scripts, and when the
scripts are done, they simply forward the email to the internal server.
Works great.
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
-Original Message-
From: Greg
-Original Message-
From: Daniel Quinlan [mailto:[EMAIL PROTECTED]
Sent: Monday, July 04, 2005 5:18 PM
To: users@spamassassin.apache.org
Subject: Re: SpamAssassin 3.1.0-pre3 released!
Chris Santerre wrote on Mon, 4 Jul 2005 12:39:48 -0400 :
Just a heads up to all, multi.uribl.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 05, 2005 10:44 AM
To: users@spamassassin.apache.org
Subject: Forged outlook headers
We have users who's mail is sent through a proxy server before it gets
filtered through SpamAssassin.
The proxy
. You can do endless post filtering with it. I'm not sure how
you would incorporate it with your current setup. Perhaps user aliases to
procmail scripts?
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
- DNSBL lookups and other DNS operations are now more
efficient, by using a
custom single-socket event-based model instead of Net::DNS.
Just a heads up to all, multi.uribl.com will not be included in this release
by default. You have to manually add it. The staff of URIBL.com want it this
Perl's CPAN?
And probably the best rule to add is at www.uribl.com ;)
Beware the ninjas!
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
to.
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
forget to sign up to submit domains, and watch your stats rise :)
Its fun an addicting. (But please, one sample spam per domain!)
So for now, we require everyone to add the multi.uribl.com into their config
manually. We have our reasons :)
Chris Santerre
System Admin and SARE/URIBL Ninja
http
-Original Message-
From: Bruno Delbono [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 28, 2005 11:45 AM
To: Chris Santerre; users@spamassassin.apache.org
Subject: Re: Very few URIBL hits today. :(
Chris Santerre wrote:
So for now, we require everyone to add the multi.uribl.com
daemon -u mail --max-conn-per-child=100
Reducing the '-m' value made no difference to this problem.
SA version is 3.0.4 on the FC4 server.
I'm completely guessing out of the blue here, but is it a timing issue? Is
it trying to restart before the final child is able to quit?
Chris Santerre
System
blocklist
[URIs: realhealthco.com]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL
blocklist
[URIs: realhealthco.com redquality.info]
2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL
blocklist
-Original Message-
From: Sven Riedel [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 09, 2005 10:19 AM
To: users@spamassassin.apache.org
Subject: Gif-Only spams
Hi,
has anyone developed a good strategy against spams
that contain a random text and the actual spam in
an image within a
-Original Message-
From: Geoff Manning [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 09, 2005 11:45 AM
To: users@spamassassin.apache.org
Subject: RE: Gif-Only spams
Check out the interesting idea at www.rulesemporium.com/forums/
entitled: Image attachment MD5 footprint RBL
My
-Original Message-
From: David B Funk [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 09, 2005 2:16 PM
To: Chris Santerre
Cc: users@spamassassin.apache.org
Subject: RE: Gif-Only spams
On Thu, 9 Jun 2005, Chris Santerre wrote:
My only comment on a system like this is that it could
True, you might list associated domains. However, URIBLs still
aren't psychic,
they're just smart enough to do research :)
However, the important point still remains: Time of check IS a
major factor when
talking about URIBLs. You cannot assume that two URIBL checks
are comparable if
they are
could use black.uribl.com.
Sh...don't tell anyone. Its not public yet ;)
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
to bypass, into spam flags.
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
0.06400.999 1.003.00 URIBL_BLACK
*cough*
And I've sinced removed the FP that was hit ;)
(Thank you again, little birdy who gave me that data!)
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
Randomly Generated Tagline:
I'd rather see my sister in a whorehouse than my brother
using windows.
- Sam Creasey
Ahahahahahahahahahahahah! Theo, you rock!
--Chris
-Original Message-
From: Michele Neylon :: Blacknight Solutions
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, May 31, 2005 5:05 AM
To: 'Jeff Chan'; 'SURBL Discussion list'; 'SpamAssassin Users'
Subject: RE: [SURBL-Discuss] Blogger attacks SURBL
[EMAIL PROTECTED] wrote:
Pardon the dramatic
are, just where you fall in the stats.) Fun game,
play against your friends ;)
We are always looking for more mirrors. So if anyone has some spare
bandwidth.
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
now. Not yet anyway. Don't want them
to move :)
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
-Original Message-
From: Jeff Chan [mailto:[EMAIL PROTECTED]
Sent: Monday, May 30, 2005 8:57 PM
To: SURBL Discuss; SpamAssassin Users
Subject: Blogger attacks SURBL
Pardon the dramatic title, but hopefully it got your attention.
This guy's domain got listed by Outblaze, we removed it,
It does happen often. And those IPs get noted. We gather info on them often.
One IP hd something like 6k of spam domains on it.
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
-Original Message-
From: Jeff Chan [mailto:[EMAIL PROTECTED]
Sent: Sunday, May 29, 2005 5:40 AM
To: Chris
Cc: users@spamassassin.apache.org
Subject: Re: NANAS
On Saturday, May 28, 2005, 2:52:52 PM, Chris Chris wrote:
I know what NANAS is, in fact I report to it nightly,
however, my
-Original Message-
From: Jon Gray [mailto:[EMAIL PROTECTED]
Sent: Friday, May 27, 2005 9:25 AM
To: SpamAssassin Users
Subject: Logfile analyzer
Can anyone recommend a good logfile analyzer for Spamassassin?
Depends on what you want to analyze. One of the ninjas wrote a great script
-Original Message-
From: Jake Colman [mailto:[EMAIL PROTECTED]
Sent: Friday, May 27, 2005 9:47 AM
To: users@spamassassin.apache.org
Subject: Re: Is Bayes Really Necessary?
OK. I misunderstood. The URIBLS are working fine.
Interestingly, although
I use the SARE rules and URIBLS,
Lik Evan has stated, it just queues locally. Same for Sendmail installs. If
we a retalking VERY high traffic, with 1000s of users, then you better have
more then one server. Or a big HD for the queue ;)
--Chris
-Original Message-
From: E. Falk [mailto:[EMAIL PROTECTED]
Sent: Friday,
without bayes. And I'm proud of that.
Chris Santerre
System Admin and SARE/URIBL Ninja
http://www.rulesemporium.com
http://www.uribl.com
-Original Message-
From: Jake Colman [mailto:[EMAIL PROTECTED]
Sent: Thursday, May 26, 2005 2:54 PM
To: users@spamassassin.apache.org
Subject: Re: Is Bayes Really Necessary?
CS == Chris Santerre [EMAIL PROTECTED] writes:
-Original Message-
From: Jake Colman [mailto
-Original Message-
From: David Brodbeck [mailto:[EMAIL PROTECTED]
Sent: Thursday, May 26, 2005 4:05 PM
To: users@spamassassin.apache.org
Subject: Re: Adjusting the AWL value
Dimitri Yioulos wrote:
Isn't the landscape bar required in every sysadmin's tool kit?
A 3.5 foot length of
201 - 300 of 524 matches
Mail list logo
