Re: Dealing with spam bots and dialup/dsl spammers

2006-08-18 Thread Oliver Schulze L.
A quick note, also these 2 options need to be configured: local_tests_only 0 skip_rbl_checks 0 Mimedefang for example uses local_tests_only 1 by default. HTH Oliver Oliver Schulze L. wrote: Hi Chris, thanks for that tip! I will use your rule and also I have done this: Incremented the score o

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-18 Thread Oliver Schulze L.
In this case its my local IP range, is the range where I put "RELAY" in sendmail's access. Thanks Oliver Benny Pedersen wrote: newer list non routelble ip as internal networks, exept if internal network is localhost or your own ip range -- Oliver Schulze L. Get my e-mail after a captcha t

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-18 Thread Justin Mason
David B Funk writes: > On Fri, 18 Aug 2006, Daryl C. W. O'Shea wrote: > > > On 8/17/2006 8:24 PM, David B Funk wrote: > > > > > Is there some documentation about how those pseudo headers work? > > > some way to print out their values or debug their usage? > > > > You can see them by adding header

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-18 Thread Justin Mason
Daryl C. W. O'Shea writes: > On 8/17/2006 8:24 PM, David B Funk wrote: > > > Is there some documentation about how those pseudo headers work? > > some way to print out their values or debug their usage? > > You can see them by adding headers that display them using the following > template tags

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread David B Funk
On Fri, 18 Aug 2006, Daryl C. W. O'Shea wrote: > On 8/17/2006 8:24 PM, David B Funk wrote: > > > Is there some documentation about how those pseudo headers work? > > some way to print out their values or debug their usage? > > You can see them by adding headers that display them using the followin

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Daryl C. W. O'Shea
On 8/17/2006 8:24 PM, David B Funk wrote: Is there some documentation about how those pseudo headers work? some way to print out their values or debug their usage? You can see them by adding headers that display them using the following template tags: _RELAYSTRUSTED_ relays used a

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread David B Funk
On Thu, 17 Aug 2006, Loren Wilton wrote: > >> Modify the regex so that you can test against the format provided in the > >> X-Spam-Relays-Untrusted or X-Spam-Relays-External pseudo headers and > >> anchor it to the beginning. > >> > >> Daryl > > > > I thought that X-Spam-Relays-Untrusted has a lis

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Loren Wilton
> Is there a way to make that trigger only on the _first_ (most recent) > received header? Modify the regex so that you can test against the format provided in the X-Spam-Relays-Untrusted or X-Spam-Relays-External pseudo headers and anchor it to the beginning. Daryl I thought that X-Spam-Relay

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread David B Funk
On Thu, 17 Aug 2006, Daryl C. W. O'Shea wrote: > John Rudd wrote: > > > Is there a way to make that trigger only on the _first_ (most recent) > > received header? > > Modify the regex so that you can test against the format provided in the > X-Spam-Relays-Untrusted or X-Spam-Relays-External pseudo

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Benny Pedersen
On Fri, August 18, 2006 00:15, Oliver Schulze L. wrote: > Oops, thanks. > Will uncomment it until I read more info about it. newer list non routelble ip as internal networks, exept if internal network is localhost or your own ip range -- Benny

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Oliver Schulze L.
Oops, thanks. Will uncomment it until I read more info about it. Oliver Daryl C. W. O'Shea wrote: Unless the machine running SpamAssassin only knows your MXes by their private IPs you don't want to use this exact config. Daryl -- Oliver Schulze L. Get my e-mail after a captcha test in: http

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Daryl C. W. O'Shea
Oliver Schulze L. wrote: And used this option too: internal_networks 192.168.1.0/24 Unless the machine running SpamAssassin only knows your MXes by their private IPs you don't want to use this exact config. Daryl

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Oliver Schulze L.
nal Message- > From: Oliver Schulze L. [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 17, 2006 2:24 PM > To: users@spamassassin.apache.org > Subject: Dealing with spam bots and dialup/dsl spammers > > > HI, > I'm getting a very high Spam volume lately. > I not

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Daryl C. W. O'Shea
John Rudd wrote: Is there a way to make that trigger only on the _first_ (most recent) received header? Modify the regex so that you can test against the format provided in the X-Spam-Relays-Untrusted or X-Spam-Relays-External pseudo headers and anchor it to the beginning. Daryl

RE: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Michael Scheidell
> Is there a way to make that trigger only on the _first_ (most > recent) > received header? > Maybe with the MTA. >

RE: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Michael Scheidell
> -Original Message- > From: Oliver Schulze L. [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 17, 2006 2:24 PM > To: users@spamassassin.apache.org > Subject: Dealing with spam bots and dialup/dsl spammers > > > HI, > I'm getting a very high Spam vol

Re: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread John Rudd
On Aug 17, 2006, at 11:38, Chris Santerre wrote: > -Original Message- > From: Oliver Schulze L. [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 17, 2006 2:24 PM > To: users@spamassassin.apache.org > Subject: Dealing with spam bots and dialup/dsl spammers > >

RE: Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Chris Santerre
Title: RE: Dealing with spam bots and dialup/dsl spammers > -Original Message- > From: Oliver Schulze L. [mailto:[EMAIL PROTECTED]] > Sent: Thursday, August 17, 2006 2:24 PM > To: users@spamassassin.apache.org > Subject: Dealing with spam bots and dialup/dsl spam

Dealing with spam bots and dialup/dsl spammers

2006-08-17 Thread Oliver Schulze L.
HI, I'm getting a very high Spam volume lately. I noticed that the most common source of spam are dial-up and A/DSL users. I wonder if there is a test that I can raise the score, when an IP/hostname send me and email and that IP/hostname is not a MX server for that domain. Thanks Oliver -- Oliv