Negative lookbehind in URIs?

)? -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT CompSci =--+--- All syllogisms contain three lines | sha...@shanew.net Therefore

7.ly?

Has anyone seen the 7.ly URL shortening service or had any interaction with them? I don't see any clear way to report abuse, but before a create a URI blacklist, I thought I'd see if maybe they're legitimate. -- Public key #7BBC68D9 at| Shane Williams http

RCVD_IN_MSPIKE_H2 score update

at ruleqa, but all I see are results for set 0, while DNSBL rules only have scores for set 1 or 3. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT CompSci

RCVD_IN_SORBS_SPAM and google IPs

to be pushing legit emails close (if not over) the local threshold. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT CompSci =--+--- All syllogisms contain

sa-update (1755260?) leads to dead spamd

, wait max 300.0 secs Aug 6 06:53:34 wanamaker spamd[17580]: prefork: child 1334: entering state 2 Aug 6 06:53:34 wanamaker spamd[17580]: prefork: new lowest idle kid: none -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System

Unique identifier in debug output

code, but I thought I'd ask in case I just missed something. -- Public key #7BBC68D9 at | Shane Williams http://pgp.mit.edu/| System Admin - UT CompSci =--+--- All syllogisms

"Received" headers for rules?

e Received headers (which explained why it hit). Is there anywhere, other than the code, where I can see what all headers might be checked as part of a "Recevied =~" rule? -- Public key #7BBC68D9 at | Shane Williams http://pgp.mit.edu/| Syste

DCC whitelisting

that would counteract the DCC score, but that seems kludgy (and doesn't help if there are meta rules that trigger off of DCC). -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT CompSci

Scroring and SPF questions

smarter way to deal with these situations. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT CompSci =--+--- All syllogisms contain three lines

DATE_IN_(PAST|FUTURE) false positives

example of both FUTURE and PAST that look like false positives to me, but this particular example has the most straightforward Received chain, and I know it's totally legit. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin

Which milter do you prefer?

be overkill. And I suspect there are a bunch more out there (though a lot of these projects seem to have stalled or died over time). What are your favorite (not spamass-milter) options for plugging spamassassin into a milter? -- Public key #7BBC68D9 at| Shane Williams http

Re: OFF TOPIC: A cartoon spam joke.

was amazed to see this cartoon, since so many people probably won't get the joke! http://bizarro.com/comics/november-15-2014/ - Mark -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT CompSci

Re: SpamAssassin Not Performing Task

to that matches my two guesses. Finally, have I missed something or is X-Spam-Bar not at all a standard SA header? -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool

Re: Learing spam/ham with Pine

not looking for something that's site-wide. This is just for my account. Thanks for any help. --pat-- -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool

Re: scantime=249.2; scantime=175.0; scantime=190.9; scantime=68.9

- http://pastebin.com/k55D79TL spam - http://pastebin.com/28qW2nga Though I hate to do it I've temporally shut down SA, hopefully some of you have a solution. Thanks Chris -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System

Re: spamass-milter -r doesn't work for me

http://marc.info/?l=spamassassin-usersm=126537672706931w=2) I still don't know how to solve this problem and I haven't got an answer to my mail, though. KR - andreas -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin

Re: spamass-milter -r doesn't work for me

On Mon, 8 Feb 2010, Andreas Haumer wrote: Hi! Am 08.02.2010 21:47, schrieb Shane Williams: I think you're both misunderstanding what the -b option does, and reading the man page, I can see how it could be more explicit. In any case, the -b option is used to send rejected mail to a specified

Re: Adding remote-ip/ESMTPID/X-Envelope to logging output?

=00:00:03, mailer=local, pri=33624, dsn=2.0.0, stat=Sent Thoughts? -Dan Mahoney -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All

Re: Unsubscribe

whose primary purpose is advertising or promoting a commercial product or service, the SA mailing list isn't even address by the law, much less in violation of it. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT

Re: faked bouncebacks. what the?

is the product itself. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines | [EMAIL PROTECTED

Re: possible idea for backscatter problem

, rather than just sent to a bounce folder, which is really what many of us would rather be doing with these messages? -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool

Re: [spamassassin] Re: [spamassassin] Re: How to report 120,000 spams

, including rejection. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines | [EMAIL PROTECTED] Therefore

Re: spamassassin sendmail virtualusers and mail lists

to contemplate. --- 9 days until Benjamin Franklin's 302nd Birthday -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool

Re: How would you provide a 554 rejection notice for spam?

? On Exchange? Would you use Sendmail? Postfix? Something else? -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three

Re: migrating from clamav before mta to SA ClamAV plugin experiences

-- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines | [EMAIL PROTECTED] Therefore

Re: My Newly Expanded DNS Blacklist - Who wants to try it?

On Sun, 17 Jun 2007, Marc Perkel wrote: Shane Williams wrote: Here's the failed for the last 4 hours message... - Transcript of session follows - ... while talking to mx.junkemailfilter.com.: 550-REJECTED - 70.112.27.10 is blacklisted at hostkarma.junkemailfilter.com 550

Re: My Newly Expanded DNS Blacklist - Who wants to try it?

at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines | [EMAIL PROTECTED] Therefore this is not a syllogism | www.ischool.utexas.edu

Re: My Newly Expanded DNS Blacklist - Who wants to try it?

it to a special place, and then visually inspect for ham/spam ratio. I don't see any better method for gathering hard data on it's success rate. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool

Re: My Newly Expanded DNS Blacklist - Who wants to try it?

On Sun, 17 Jun 2007, Marc Perkel wrote: Daryl C. W. O'Shea wrote: Shane Williams wrote: On Sat, 16 Jun 2007, Marc Perkel wrote: Using my new ideas here's my raw blacklist file. It has about 80k IP addresses and is updated every 10 minutes. http://iplist.junkemailfilter.com

Re: Innovative Host Blacklisting Idea

On Fri, 15 Jun 2007, Marc Perkel wrote: Shane Williams wrote: Unless you have some other reliable source of statistics regarding how various entities choose MX records, I'd expect blacklisting this way is likely to garner significant false positives. It appears that some spammers hit

Re: Innovative Host Blacklisting Idea

to garner significant false positives. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines | [EMAIL

Re: [OT] RDJ RulesDuJour Updates dont lint

look through recent list posts, you'll find that RDJ has been causing lots of people trouble due to the fact that certain rule channels have been unavailable. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool

Re: Spamass-Milter Help

would be great! -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines | [EMAIL PROTECTED

Re: Rules always triggering.

message for this list got those rules triggered. (_Everything_ triggers them.) This is just a guess, but is it possible that OS X's use of carriage returns is making the message look to spamassassin as if it's a single line of text? -- Public key #7BBC68D9 at| Shane

Re: How to examine a system and determine the mail delivery agent.

, you can probably check the config files. For example, grep for the string Mlocal in /etc/mail/sendmail.cf and if it makes reference to procmail, the MDA is procmail. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT

Re: DCC worth it?

take my own advice and not reply on things that I don't know the in-depth details of. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All

Re: Why is there so much hype behind Image spam

On Sun, 16 Jul 2006, John Andersen wrote: On Sunday 16 July 2006 06:35 am, Shane Williams wrote: I never realized SpamAssassin was started back in 1994.  What version number was that?  I'd say it was definitely ahead of its time, since I almost never got email spam until around 1996-1997

Re: sender-valid SMTP callbacks (Re: Does tuxorama.com sound fa miliar to anyone?)

with anything yet) -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines | [EMAIL PROTECTED

Re: error during report: Insecure dependency

1.2.69. Any ideas/comments are most welcome. BR, Matías. -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three

Webmail and IP rules

altogether (or ignore it in relation to certain rules). -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines

Spamcop reporting and insecure dependency

at| Shane Williams http://pgp.mit.edu/| System Admin - UT iSchool =--+--- All syllogisms contain three lines | [EMAIL PROTECTED] Therefore this is not a syllogism