Re: AE_MEDS35 does not more work...

2009-07-05 Thread Benny Pedersen
On Sat, July 4, 2009 01:31, Michelle Konzack wrote: Hello, In a maill which hit the score I see this: report the ip to dnswl -1.0 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [70.103.162.29 listed in

Re: AE_MEDS35 does not more work...

2009-07-05 Thread John Hardin
On Sat, 4 Jul 2009, Pawe�~B T�~Ycza wrote: Dnia 2009-07-03, pią o godzinie 23:38 -0400, MySQL Student pisze: +body LOCAL_BODY_WWW_MEDSXX_NET /\bwww(?:\s|\s\W|\W \s)\w{1,6}\d{1,6}(?:\s|\s\W|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i ^ ^ F... spammers. They spoil my weekend ;)

Re: AE_MEDS35 does not more work...

2009-07-04 Thread Michelle Konzack
Hello Rawe and *, Now with a new spam I tried it again and nothing. I have now renamed the AE_MEDS35 to PRIVATE_MEDS01 run spamaassassin in Debug with: spamassassin -D original.msg spamassassin.msg 2spamassassin.log and the results are here:

Re: AE_MEDS35 does not more work...

2009-07-03 Thread Michelle Konzack
Am 2009-07-02 15:18:16, schrieb John Hardin: Can you post the original raw message to a pastebin, please? I am on GSM (O2) and not able to upload to pastebin (I can view contents abut not upload) I will try to upload it to http://devel.debian.tamay-dogan.net/tmp/spamassassin/ Thanks,

Re: AE_MEDS35 does not more work...

2009-07-03 Thread Paweł Tęcza
Michelle Konzack pisze: Am 2009-07-02 15:18:16, schrieb John Hardin: Can you post the original raw message to a pastebin, please? I am on GSM (O2) and not able to upload to pastebin (I can view contents abut not upload) I will try to upload it to

Re: AE_MEDS35 does not more work...

2009-07-03 Thread Paweł Tęcza
Paweł Tęcza pisze: Hello, $ wget http://devel.debian.tamay-dogan.net/tmp/spamassassin/non_working_sa.00.msg ... $ wget http://devel.debian.tamay-dogan.net/tmp/spamassassin/non_working_sa.11.msg $ spamassassin -D non_working_sa.00.msg non_working_sa.00.log 21 ... $ spamassassin -D

Re: AE_MEDS35 does not more work...

2009-07-03 Thread Benny Pedersen
On Thu, July 2, 2009 23:54, Michelle Konzack wrote: Coming home for some minutes I saw, I am hit by 23.000 spams in my inbox from today... use postfwd ? RCVD_IN_NJABL_PROXY hits and can be tested in mta 23000 spams in home mailbox/mta is to much to just say i dont care :) -- xpoint

Re: AE_MEDS35 does not more work...

2009-07-03 Thread Michelle Konzack
Hello, In a maill which hit the score I see this: [ STDIN ]--- Spam detection software, running on the system vserver1.tamay-dogan.net, has identified this incoming email as possible spam. The original message has been attached to this

AE_MEDS35 does not more work...

2009-07-02 Thread Michelle Konzack
Coming home for some minutes I saw, I am hit by 23.000 spams in my inbox from today... The rule: bodyAE_MEDS35 /\bwww(?:\s\W?\s?|\W\s)\w{3,6}\d{2,6}(?:\s\W?\s?|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i describeAE_MEDS35 obfuscated domain seen in spam score

Re: AE_MEDS35 does not more work...

2009-07-02 Thread John Hardin
On Thu, 2 Jul 2009, Michelle Konzack wrote: bodyAE_MEDS35 /\bwww(?:\s\W?\s?|\W\s)\w{3,6}\d{2,6}(?:\s\W?\s?|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i doea not work on the following mail: 8-- Doo You Maake

RE: AE_MEDS35 does not more work...

2009-07-02 Thread McDonald, Dan
Coming home for some minutes I saw, I am hit by 23.000 spams in my inbox from today... The rule: bodyAE_MEDS35 /\bwww(?:\s\W?\s?|\W\s)\w{3,6}\d{2,6}(?:\s\W?\s?|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i describeAE_MEDS35 obfuscated domain seen in spam score

Re: AE_MEDS35 does not more work...

2009-07-02 Thread Ralf Hildebrandt
* McDonald, Dan dan.mcdon...@austinenergy.com: How about: /\bw{2,3}[[:punct:][:space:]]{1,3}[[:alpha:]]{3,6}\d{2,6}[[:punct:][:space:]]{1,3}(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i Gesundheit! :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin