Iran Nuclear spam

2005-08-09 Thread E. Falk
Anyone else been seeing a lot of these come in? The text includes a snippet about the Iran Nuclear situation and a link to a full article. The article appears to have been pinched from elsewhere, but the page includes javascript which appears to use a buffer overflow to load a .hta file. All

Re: Iran Nuclear spam

2005-08-09 Thread E. Falk
E. Falk wrote: Anyone else been seeing a lot of these come in? The text includes a snippet about the Iran Nuclear situation and a link to a full article. The article appears to have been pinched from elsewhere, but the page includes javascript which appears to use a buffer overflow to load

Re: When is Bulk Bulk

2005-08-09 Thread E. Falk
Rob McEwen wrote: Does anyone else consider SpamHaus's definition as too weak and believe that ANY unsolicited e-mail is spam, even if a personally hand-typed note? I'm really curious as to how we would defined solicited e-mail. As far as bulk e-mail goes, it's fairly easy. Do I solicit the

Re: When is Bulk Bulk

2005-08-09 Thread E. Falk
Mike Wiebeld wrote: Rob McEwen [EMAIL PROTECTED] wrote on 08/09/05 12:59PM: OBSERVATION: Could some of us be treating unsolicited Business-to-Consumer and unsolicited Business-To-Business the same? Should they be treated the same? Of course we treat them the same. They all go through

Re: question

2005-06-23 Thread E. Falk
Daniel Geldres wrote: Hi, is there any spamassassin mailing list in spanish? I have some doubts that I´d like to clear up but my english is not very good. I have Postfix with Amavis and Clamav, and I´d like to use Spamassassin. Amavis and Clamav work fine with Postfix, but I don´t know how

Re: Exchange/Outlook - how do you learn spam?

2005-06-22 Thread E. Falk
Hi Joe, I have seen this problem on Ex2K and Ex2K3, I don't remember if it was an issue under 5.5 or not. I have a copy of a test-imap-header.pl script written by Nick Burch that can be used to see what the headers look like after you pull a message from an IMAP folder... let me know if you

Re: Exchange/Outlook - how do you learn spam?

2005-06-21 Thread E. Falk
Easiest way to get them out of the Exchange public folder without messing up the headers is via IMAP. There are some scripts available to open the folder and read the messages (can't recall exactly where, but if you can't find them let me know and I'll pass mine onto you - they're modified

Re: Exchange/Outlook - how do you learn spam?

2005-06-21 Thread E. Falk
Jon Dossey wrote: (moved to bottom quote for you) I think I know the document you're referring to... http://wiki.apache.org/spamassassin/RemoteImapFolder?highlight=%28imap%2 9 My problem is I don't like my MX (sitting in DMZ's), to connect back to the Exchange server (private network) via

Re: Net::DNS problem?

2005-06-10 Thread E. Falk
I *just* finished fixing exact problem this on my own machine. The issue is indeed with Net-DNS 0.50. Remove it and install 0.48 and all your troubles will go away. Evan Rolf Kraeuchi wrote: Hi! I just upgraded one of our Gateway (scan)servers from SA 2.61 to 3.04 (System is SuSE Linux

Re: Net::DNS problem?

2005-06-10 Thread E. Falk
. Evan E. Falk wrote: I *just* finished fixing exact problem this on my own machine. The issue is indeed with Net-DNS 0.50. Remove it and install 0.48 and all your troubles will go away. Evan Rolf Kraeuchi wrote: Hi! I just upgraded one of our Gateway (scan)servers from SA 2.61 to 3.04

Re: Net::DNS problem?

2005-06-10 Thread E. Falk
Interesting... I checked the Base.pm file for 0.48 and that line doesn't exist. I guess the failed tests were just a coincidence, and I ended up doing the right thing for the wrong reasons. :) Evan Tim Rosmus wrote: Here's what I did for this *** lib/Net/DNS/Resolver/Base.pm.orig

Re: Gif-Only spams

2005-06-09 Thread E. Falk
The other big problem I see is phishers (or spammers trying to poison the system) intentionally inserting images normally found in legitimate e-mails (eg, e-bay). You'd end up scoring all legit e-mails that image hash shows up in. Evan Sven Riedel wrote: Hi, has anyone developed a good

Re: Gif-Only spams

2005-06-09 Thread E. Falk
Absolutely - that's why I said scoring rather than blocking. :) All I meant was that a few e-Bay phishers start using the e-bay logo, it gets marked as a spam image and all future e-bay e-mails will have +1 added to them. Shouldn't be enough on its own to counteract AWL, Bayes, etc. for a big

Re: drop in graph??

2005-05-30 Thread E. Falk
I'm sure there are some PHP hackers who have much nicer graphs than I do, but I found the easiest thing to do was to extract numbers from my logs with some perl scripts and paste them into Excel. Management likes Excel and it makes pretty charts. :) It's not automated, but it does have lots

Re: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread E. Falk
, then you better have more then one server. Or a big HD for the queue ;) --Chris -Original Message- From: E. Falk [mailto:[EMAIL PROTECTED] Sent: Friday, May 27, 2005 12:16 PM To: spamassassin-users@incubator.apache.org Subject: Re: SA Gateway - MS Exchange -- what if MSE down? Hi