Re: SOT - Fowarding mail to new service, keeping same MX, pitfalls

2015-10-22 Thread Dave Pooser
ART must equal server PTR is already blocking millions of legitimate messages from Google Apps users, hosting providers, and of course O365. Honestly, do you really need to communicate with anyone that clue-free? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: SOT - Fowarding mail to new service, keeping same MX, pitfalls

2015-10-22 Thread Dave Pooser
ot;. That is, from IP's that are not published as >"ours". This is why SPF has "include" syntax. Check with the Microsoft rep for the exact details, but it will probably mean something like adding "include:spf.messaging.microsoft.com include:spf.protection.outlook.com" to your current SPF record. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

What does URIBL_SBL check (was Re: Amazon Route53 nameservers listed in SBL?)

2015-09-03 Thread Dave Pooser
ption bug or something else? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Amazon Route53 nameservers listed in SBL?

2015-09-02 Thread Dave Pooser
issue.) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: PatioDeals@recolong.review how to get high score

2015-08-13 Thread Dave Pooser
Can I configure Spam-assassin to drop emails with extensions .review? I get a lot of emails with Add to a .cf file blacklist_from *.review And done. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

FSL_MY_NAME_IS scoring 2.9??

2015-07-13 Thread Dave Pooser
temporarily bumped it down to 0.5 in local.cf, but I'd welcome input from the developers on that one -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Rules for RanDoMCapitALizED URIs?

2015-07-03 Thread Dave Pooser
I see a lot of sam coming in from domains that use a lot of random capitalization in both the domain and TLD portions -- does anybody have a good rule for catching those? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: AWL defeating my SPAM classification

2015-04-30 Thread Dave Pooser
to the appropriate uribl.com server. In your case your actual IPs will be different, but the pattern should still hold. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: AWL defeating my SPAM classification

2015-04-30 Thread Dave Pooser
on MacOS and Ubuntu. Sorry for the noise! slinks off -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: effectiveness of DCC checks?

2015-04-14 Thread Dave Pooser
mailing list posts, it¹s worth putting the effort in to change that. It took me 30 seconds of reading to confirm that my understanding of DCC was correct, and another 60 seconds to discover that my understanding of Razor and Pyzor was wrong. Worth the effort, I¹d say. -- Dave Pooser Cat-Herder-in-Chief

Re: Uptick in spam

2015-03-27 Thread Dave Pooser
You also may want to look at the Invaluement IP/URI lists. (Invaluement.com). Detection rate is real good and FP level is extraordinary. +1. Very happy with invaluement at $DAYJOB. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Bogus day old domains from RRPPROXY.NET

2015-03-13 Thread Dave Pooser
with the sharpened end of an interspace t00thbrush given her by Svenge -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: updated RegistrarBoundaries.pm

2015-02-21 Thread Dave Pooser
On 2/21/15 7:31 PM, Nick Edwards nick.z.edwa...@gmail.com wrote: Plenty appreciate your work, dont worry about $INDIVIDUAL, that $EXPLETIVE I'm not a moderator or anything, but this kind of personal attack is neither necessary nor appropriate here, IMO. -- Dave Pooser Cat-Herder-in-Chief

Re: Amazon phishing spam

2015-02-15 Thread Dave Pooser
the phish in the junk folder just gives them an easy opportunity to make mistakes. I have Exim set to reject mail on an SA score of 10+ and it's been years since I had a FP score 10+. (I quarantine SA scores of 5.0-9.9 and those average 2-3 FP a week.) -- Dave Pooser Cat-Herder-in-Chief

Re: Amazon phishing spam

2015-02-14 Thread Dave Pooser
. For myself, Id rather reject barely-possibly-valid mail from those senders than accept probable-phishing emails claiming to be from those senders; as always YMMV and my advice is worth precisely what you paid for it. ;-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: URLs with non-ASCII chars

2015-02-13 Thread Dave Pooser
On 2/13/15, 4:27 PM, Dave Wreski dwre...@guardiandigital.com wrote: I thought I would send this on to you instead of broadcasting it. You thought wrong :-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Amazon phishing spam

2015-02-12 Thread Dave Pooser
will be blacklisted, but for an authenticated address it's canceled by the whitelisting. (Also, I score blacklist_from at 80 points so an address that's both blacklisted and whitelisted will be effectively whitelisted, thanks to a net -20 score.) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: New type of obfuscation?

2015-01-02 Thread Dave Pooser
that have to be a rawbody rule? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Honeypot email addresses

2014-12-04 Thread Dave Pooser
$FOO you were having? since I can't assume they're still subscribed to the list. I may or may not copy the list on that email, though I certainly will if I come up with an answer. obligatory http://xkcd.com/979/ reference here -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life

Re: ancient perl versions

2014-12-04 Thread Dave Pooser
' and this one omitted font-size entirely. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: ancient perl versions

2014-12-04 Thread Dave Pooser
On 12/4/14 10:27 PM, Nick Edwards nick.z.edwa...@gmail.com wrote: It's also not wrapping the text at all. it wraps fine here Look at the last roundcube post, the one sent at 01:06 GMT. The line of quoted text runs 273 columns without a linewrap. -- Dave Pooser Cat-Herder-in-Chief

Re: Honeypot email addresses

2014-12-03 Thread Dave Pooser
did NOT sign up for an email list and then start marking it as spam in lieu of the unsubscribe button. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across

Re: Argument perl_version isn't numeric

2014-11-30 Thread Dave Pooser
monitoring script to tell you if sa-update broke spamd 5) Run SA in some kind of container or VM so you can optimize for spamassassin without tainting the purity of your RHEL install -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention

Re: Argument perl_version isn't numeric

2014-11-30 Thread Dave Pooser
to run spamassassin on a distribution that is constitutionally opposed to modern perl is not the fault of the spamassassin team. The problem is in the system administrator who tries to hammer every use case into the same square hole. It should be fixed there. -- Dave Pooser Cat-Herder-in-Chief

Re: Argument perl_version isn't numeric

2014-11-30 Thread Dave Pooser
the version_check out and break sa-update on computers running older versions of perl 3) Write all spamassassin rules to use the lowest-common-denominator perl, which would be the crufty version of perl I referred to above. Do you see a fourth option? -- Dave Pooser Cat-Herder-in-Chief

Re: New spam / phishing rule?

2014-11-08 Thread Dave Pooser
On 11/8/14, 5:57 PM, Reindl Harald h.rei...@thelounge.net wrote: what is that garbage worth for? It's from a book by Terry Pratchett. Are we really so hard up for things to talk about that we're going to have a .sig flamewar now? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com Programming

Re: half-OT: please remove spam-markers from subjects

2014-10-03 Thread Dave Pooser
and *not responding* to each other, including passive-agressive I'm not speaking to him but would you please tell him he's a big ol' poopy-head comments? Alternately, may I request a list moderator review the signal:noise ratio associated with this feud and take appropriate action? -- Dave Pooser Cat-Herder

Re: sa-learn from a remote imap folder

2014-09-13 Thread Dave Pooser
, for the warning and thanks, Bob, for setting my mind at ease. ;-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: sa-learn from a remote imap folder

2014-09-12 Thread Dave Pooser
servers for sa-learn. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO

Re: sa-learn from a remote imap folder

2014-09-12 Thread Dave Pooser
option -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO!!! -- Bill

Re: Valid TLDs (was: Re: Custom rule not hitting suddenly?)

2014-09-08 Thread Dave Pooser
preoptimized blob over adding a new dependency. That said, I'd rather have the new dependency than keep the configuration embedded in the rules. So, in order of preference: 1) Pre-optimized blob 2) Regexp::List dependency 3) Current method -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Valid TLDs (was: Re: Custom rule not hitting suddenly?)

2014-09-08 Thread Dave Pooser
embedded in the rules. ^ Code, not rules. Which basically is the issue here... Just read what I *mean* and not what I type. ;-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty

Re: Missing rules

2014-08-07 Thread Dave Pooser
-to-be-outdated 3.4.0, or you can switch to Fedora, or start using CPAN, or But trying to fight spam with a 4.5-year-old version of SpamAssassin is as likely to succeed as using a 4.5 year old set of virus definitions for your virus filtering. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life

Re: Ready to throw in the towel on email providing...

2014-07-29 Thread Dave Pooser
I'm not getting a discount or anything for this.) :-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out

Re: RBL effectiveness (was Re: Ready to throw in the towel on email providing...)

2014-07-29 Thread Dave Pooser
of troubles) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO

Re: Obfuscated Windows excecutables (was Re: Ideas sought for blocking new variant of cryptolocker)

2014-07-10 Thread Dave Pooser
be living in a much nicer world than the one we currently inhabit. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used

Re: Consecutive Newlines in Rawbody Rules (was: Re: Bayes refinement)

2014-06-17 Thread Dave Pooser
. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO!!! -- Bill McKenna

Re: Consecutive Newlines in Rawbody Rules

2014-06-17 Thread Dave Pooser
On 6/17/14 3:31 PM, Kevin A. McGrail kmcgr...@pccc.com wrote: On 6/17/2014 4:22 PM, Dave Pooser wrote: Did any decision on this get reached? Yes, I believe it was committed to trunk and considered resolved. Presumably that will be released in 3.4.1 -- is there a target date for that release

Re: sa-update NOT updating.

2014-06-16 Thread Dave Pooser
and/or VM space at $WORKPLACE for an offsite replica as long as we wouldn't need to sync more than 2-4GB/day after the initial setup completed. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

RCVD_IN_IADB_VOUCHED pushed spam into false negatives

2014-04-13 Thread Dave Pooser
for stock SA? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO

Re: CentOS/RHEL repo?

2014-03-17 Thread Dave Pooser
). -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: BAYES_999 strange behavior

2014-02-20 Thread Dave Pooser
couple of rule updates. Can we get a posting to this list when that rule update happens? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line

Re: BAYES_999 strange behavior

2014-02-18 Thread Dave Pooser
when $DAYJOB is not requiring 12-hour days from me -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out

3.4 predicted release date?

2013-05-13 Thread Dave Pooser
is not currently in use. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Dave Pooser
the messagelabs servers to trusted_networks means 1) don't check the messagelabs server IPs against blacklists or whitelists and 2) do check the hop before messagelabs against blacklists and whitelists. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave

Rule to catch similar localparts in To: recipients?

2012-03-27 Thread Dave Pooser
that sort of message? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com If you think bringing a wet noodle to an Amish rake fight makes you 'better armed' for it, then you have a funny understanding of how the universe works. -- Al Iverson

Re: sa-update / perl error again

2012-01-05 Thread Dave Pooser
out there. (I personally have an irrational affection for OpenIndiana -- all the crunchy goodness of Solaris without the Ellison tax-- but Ubuntu or Fedora might be better options if you're primarily familiar with Linux.) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey

Re: Adding a blacklist via sa-update - would you mind?

2011-12-06 Thread Dave Pooser
I'm not very familiar with sa-update, but perhaps it should have seperate channels similar to Debian's stable and testing releases. A new DNSBL (IMO) would definitely be a testing release. End-users could then subscribe to whichever channel suited their risk profiles. +1 -- Dave Pooser Cat

Re: Need Volunteers for Ham Trap

2011-01-18 Thread Dave Pooser
for different airlines, and it would be trivial for me to have my server relay those messages to a hamtrap address as well as delivering to my personal email if that sort of thing would be useful. -- Dave Pooser Cat-Herder-in-Chief Pooserville.com

Re: IPv6 DNSBL/WL design, was Fwd: [Asrg] draft-levine-iprangepub-01

2011-01-03 Thread Dave Pooser
your MX records aren't going to propagate through DNS much faster than that anyway. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside

Re: IPv6 DNSBL/WL design, was Fwd: [Asrg] draft-levine-iprangepub-01

2011-01-03 Thread Dave Pooser
about who gets SMTP-designation. Frankly, I'd think that besides costing the spammers money (a good thing in and of itself) it would also be a pretty good spamsign if a block has more than, say, 5 or so registered senders in a /64. Just thinking out loud here -- Dave Pooser Cat-Herder-in-Chief

Re: How not to implement SPF (nationwide.co.uk)

2010-07-05 Thread Dave Pooser
, not the ultimate hat-checker. Just a way that I can make sure legitimate mails from $sender get through while forged messages pretending to be from $sender don't. This ain't rocket surgery. -- Dave Pooser Cat-Herder-in-Chief Pooserville.com

Re: Set for Whitelist Only?

2010-06-12 Thread Dave Pooser
AJ_NOT_TO_ABUSED80.0 Messages from whitelisted users will start with a score of -20; messages from other users will start with a score of 80. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved

Re: Spamassasin as a gateway filter for Exchange

2010-05-20 Thread Dave Pooser
addresses. That's a very bad idea-- legitimate senders will sometimes mistype addresses, and having their messages disappear into a black hole with no notice to the sender is... suboptimal. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention

Re: Bogus mails from hijacked accounts

2010-03-11 Thread Dave Pooser
, in the past few years-- and used a number of phrases that a native speaker of American so-called-English wouldn't. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide

Re: Off Topic - SPF - What a Disaster

2010-02-23 Thread Dave Pooser
is worth its weight in platinum -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting

Re: painting everybody in Taiwan with the same brush

2010-01-25 Thread Dave Pooser
, but I'm not gonna get close enough for it to bite me. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out

Re: Dear Santa

2009-12-19 Thread Dave Pooser
to share the code so that some of us could auto-generate rules based on our own ham/spam mailstreams, and then share those rules with you for possible SOUGHT inclusion? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one

Re: Dear Santa

2009-12-19 Thread Dave Pooser
with a diagnosis of terminal cancer (they gave him six months-- he held on four years); through chemo and all the other sufferings he'd stayed energetically involved in fighting spam and helping others learn to do so. Talk about sliding across the finish line broadside -- Dave Pooser Cat-Herder

Re: OT: Museum piece...

2009-12-16 Thread Dave Pooser
faster and 100x more friendly for the tech directors to use than the $20k GVG package was. Heh. And today at $DAYJOB we're using $2200 worth of Playback Pro software + iMac because it's 4x faster and 100x more friendly than the $10k GV Turbo. The more things change :-) -- Dave Pooser Cat

Re: emailreg.org - pretty good white list

2009-12-12 Thread Dave Pooser
mail server ya gots here-- be a shame if something wuz to HAPPEN to it -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside

Re: Constant Contact

2009-10-19 Thread Dave Pooser
. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com And the beer I had for breakfast Wasn't bad, so I had one more for dessert.

Re: Independence Day - Barracuda SA Rules White List

2009-07-03 Thread Dave Pooser
assume you gave the holiday a different name to clarify for those of us on the wrong side of the pond?) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across

Re: Boxtrapper and Spamassassin Cpanel 11 strange behaviour.

2009-05-11 Thread Dave Pooser
to make sure the backscatterer gets the spam. I figure if he wants me to filter his spam for free, he'll get every bit of his money's worth. ;-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com If you think bringing a wet noodle to an Amish rake fight makes you 'better armed' for it, then you have

Re: Spam Assassin White List

2009-03-25 Thread Dave Pooser
Is there a blacklist_noauth? Because it seems that would be far more useful for paypal. blacklist_auth *paypal* You whitelist_auth paypal.com and then a rule that scores +50 for From contains *...@paypal.com -- quick and easy. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Suddenly bouncing emails

2009-03-23 Thread Dave Pooser
practice is to run a DNS instance on your mail server for its exclusive use to avoid that sort of problem. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com You know a nice little side benefit of watching women's sports? Sitting in front of the TV for a while without hearing about erectile dysfunction

Re: Spam Assassin White List

2009-03-23 Thread Dave Pooser
in a world where spammers forge From: addresses constantly. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com You're useless when you're high on catnip, you know that?

Re: Bye Bye Bayes

2009-03-04 Thread Dave Pooser
I used to have a couple of users who treated their Trash folder as long-term read-message storage. I have a user like that at $DAYJOB. I used to ask him if he kept his car title and other important documents in the wastebasket under his desk at home. -- Dave Pooser Cat-Herder-in-Chief

Re: Spam hitting Bayes_99?

2009-01-20 Thread Dave Pooser
accurately-flagged spam-- into that folder for learning. You can do the same thing with ham, too. I have my server regularly learn as ham a couple of users' inboxes to make sure Bayes has a good ham corpus to work with. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey

Re: Temporary 'Replacements' for SaneSecurity

2009-01-14 Thread Dave Pooser
None of my friends are on services that are that poorly configured No friends on Verizon? Their @#$% mail servers are 70% of my FPs. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved

Preemptive URI blocklisting

2008-12-14 Thread Dave Pooser
joins their blacklist a couple of weeks later) -- but I think the real win would come in creating a URI specifically for preemptively listing these snowshoe domains. Anybody else think this could be useful? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com I don't think there's a problem you

Re: Re[2]: filter for russian porno message?

2008-11-11 Thread Dave Pooser
Thanks. Sorry,but I'm new in spamassassin users.Can you say where I must write this rules? Thanks again. Be very careful with that rule-- it would hit on all Russian-language email, which considering your geographic location might be unwise. -- Dave Pooser Cat-Herder-in-Chief

Re: New free blacklist: BRBL - Barracuda Reputation Block List

2008-09-23 Thread Dave Pooser
that submitted the original message somewhere in the bowels of an RFC1918 network. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly

Re: Dramatic increase in bounce messages to forged addresses

2008-04-02 Thread Dave Pooser
forged addresses from domains that publish DKIM/SPF records; that's a simple check they can run to increase the chance of their spew hitting inboxes instead of /dev/null. -- Dave Pooser Cat-Herder-in-Chief,Pooserville.com Jon, the CIA's credibility has never been lower. Crazy people no longer

Re: Howto stop SPF_FAIL from internal network?

2008-03-25 Thread Dave Pooser
An SPF_PASS is pretty worthless But awfully handy for whitelist_from_spf. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: the opposit of ok_locales ??

2007-12-06 Thread Dave Pooser
shouldn't be tweaking SpamAssassin conf files, or most other server settings. The world has enough Mouse Clicking System Engineers. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece

Re: newbie question: scan msgs smaller than certain size

2007-10-05 Thread Dave Pooser
+ deny message = Message blocked by our spam filter.\nEmail [EMAIL PROTECTED] with questions. condition = ${if {$message_size}{100K}{true}{false}} spam = nobody:true condition = ${if {$spam_score_int}{99}{1}{0}} -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: New domains (was: URIWhois plugin)

2007-09-27 Thread Dave Pooser
a multi-gigabyte zone file and I expect that would prove a little problematic for whatever sucker^H^H^H kind soul ended up hosting the thing. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved

Re: sender name same as recipient name

2007-09-24 Thread Dave Pooser
your timestamps are accurate all of these should have hit on one or more URIBL rules. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line

Re: FPs for SUBJECT_FUZZY_MEDS

2007-09-06 Thread Dave Pooser
and if it is present and SUBJECT_FUZZY_MEDS hits adds a negative score equal to the SUBJECT_FUZZY_MEDS score. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com The one thing I never want to see again is a military parade. --Ulysses S. Grant

Re: Posioned MX is a bad idea [Was: Email forwarding and RBL trouble]

2007-08-26 Thread Dave Pooser
On Sat, 25 Aug 2007, Dave Pooser wrote: So do you run your servers with VRFY enabled? Yes. If you are verifying addresses at RCPT time, which you must to avoid spam blowback, then there's no point disabling VRFY. Except that I can verify addresses after checking blacklists, RDNS and other

Re: Posioned MX is a bad idea [Was: Email forwarding and RBL trouble]

2007-08-25 Thread Dave Pooser
If someone is sending email using one of my domains I want people verifying the sender addresses. So do you run your servers with VRFY enabled? -- Dave Pooser Cat-Herder-in-Chief Pooserville.com Jon, the CIA's credibility has never been lower. Crazy people no longer believe the CIA

Re: Bouncing emails from certain countries

2007-08-20 Thread Dave Pooser
countries. Lying about why the message was rejected is going to be something you have to do in your MTA, and I'd consider it an extremely bad idea because it's going to make troubleshooting difficult. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com The greatest dangers to liberty lurk in insidious

Re: How do I temporarily disable SpamAssassin?

2007-08-19 Thread Dave Pooser
. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com Jon, the CIA's credibility has never been lower. Crazy people no longer believe the CIA is implanting a chip in their heads to listen to their dreams. They just don't think they can pull it off. It's a sad day for America when even our paranoid

Re: fdf spam

2007-08-11 Thread Dave Pooser
-27, and you have to actually read the .pm to see that it's now at 0.8. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com NASCAR is a Yankee conspiracy to keep you all placated so the South won't rise again. --QuestionableContent.net

Re: Now its zip attachments ^^

2007-07-23 Thread Dave Pooser
to deliver what they expect instead of getting hung up on the purpose of email as defined in 1970-whatever. /rant -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide

Re: New PDF?

2007-07-22 Thread Dave Pooser
Current version is v0.6. And sigs for those were added last Thursday... The web page at http://www.rulesemporium.com/plugins.htm still identifies it as 0.4 with a mod date 0f July 16, FYI. The linked file is 0.6, though. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life

Re: not everyone is happy with SA

2007-07-19 Thread Dave Pooser
for. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com Every bad turn I've made, you've been at the helm, sowing chaos and stupidity through the landscape of my days like some sort of retarded Johnny Appleseed. -- Goats 8-31-2005

Re: not everyone is happy with SA

2007-07-19 Thread Dave Pooser
release the spam from quarantine. So no backscatter spamming innocent third parties, but you still get a chance for the sender to verify sending a message. The backend might be a little involved to set up, but the final system looked secure and easy to use. -- Dave Pooser Cat-Herder-in-Chief

Re: not everyone is happy with SA

2007-07-19 Thread Dave Pooser
. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting GERONIMO!!! -- Bill McKenna

Re: Need a rule written - Can whitelisting be this easy?

2007-07-12 Thread Dave Pooser
before you commented on it, especially since it seems to complement your own idea quite nicely? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com I've *met* humanity. I worked retail. --Diesel Sweeties

Re: How To Kill Spam Dead?

2007-05-31 Thread Dave Pooser
to send the message and not to the (probably forged) return-address. No backscatter, no joejob potential. The only problem I see is that some MTAs may clean up the message until it's unrecognizable. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave

Re: False positives: [SPF failed: ]

2007-05-23 Thread Dave Pooser
This looks familiar... as in I think I've fixed this before familiar. What version of SA are you using? SA 3.1.5, Perl 5.8.6, on Mac OS X Some more reading found that [SPF failed: ] is a normal result for an SPF timeout, so I set spf_timeout 30 and will see if that helps any. -- Dave Pooser

False positives: [SPF failed: ]

2007-05-22 Thread Dave Pooser
BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.5 MY_CID_AND_ARIAL2 SARE CID and Arial2 X-Spam-Level: + This is a multi-part message in MIME format. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life

Re: R: R: Inappropriate use of E-Mail addresses

2007-05-13 Thread Dave Pooser
account (took me 6 years and a new boss to finally put a bullet in it) we've seen MANY fewer joejobs. Don't know whether there's causation or just correlation, but either way it makes me a happy man. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com We owed them our loyalty, as Americans, and we

Alternative to red.uribl.com?

2007-04-03 Thread Dave Pooser
the information from whois during mail processing? (Although that would be resource-intensive and would probably run afoul of their prohibition on high-volume querying, so that's probably a lose.) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com ...Life is not a journey to the grave with the intention

Re: how is spamd launched on Mac OS X Server 10.3.9?

2006-12-01 Thread Dave Pooser
I can't find a spamd.sh anywhere... SA is not included by default until 10.4. If you installed it yourself, you may need to create a StartupItem in /Library/StartupItems. Otherwise, check the documentation from the installed package. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com The one

Re: What's with UCEPROTECT List?

2006-10-17 Thread Dave Pooser
a server DOSed by sender callouts, ever? I never have and I've ever heard of one -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com And the beer I had for breakfast Wasn't bad, so I had one more for dessert.

Re: Concerned with scores for from rfc-ignorant.org

2006-10-13 Thread Dave Pooser
for me would hit a lot of ham for a stockbroker. That's why you can adjust scores in local.cf. If your experience is that the RFCI rules aren't hitting any spam, then disable them. But to dismiss them as useless for anyone because they're useless to you is, IMHO, missing the point. -- Dave Pooser

Re: Any comments of the SpamHaus lawsuit?

2006-10-11 Thread Dave Pooser
the problem? The only problem I see is the spammy scumbags get to claim a victory. They'll be lying, of course, but still. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com Yup, that's the citrusy taste of failure all right.

  1   2   >