Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread Daniel J McDonald
On Fri, 2007-06-22 at 17:03 +0200, arni wrote: > Marc Perkel schrieb: > > > > That doesn't answer his question though. He didn't ask for your > > opinion about if he needed it. If the rules were working for him he > > wouldn't be asking for help. When someone asks a question telling > > them they

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread arni
Matt schrieb: I have Spamassassin setup to whitelist all my own IP pools. Do I need to do anything else? Matt make sure that anything that is an MX for x@.com is in your internal_networks arni

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread Matt
http://people.ucsc.edu/~jrudd/spamassassin/ docs inside the archive - botnet is really one of the most effective plugins i use these days (make sure you set your internal nets properly I have Spamassassin setup to whitelist all my own IP pools. Do I need to do anything else? Matt otherwise

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread arni
Matt schrieb: together with a decent bayes or 1 or 2 more rules already does the job and Where do I get the botnet plugin(prefer rpm) and how do I make Spamassassin use it? Matt http://people.ucsc.edu/~jrudd/spamassassin/ docs inside the archive - botnet is really one of the most effective

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread Matt
together with a decent bayes or 1 or 2 more rules already does the job and Where do I get the botnet plugin(prefer rpm) and how do I make Spamassassin use it? Matt

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread arni
Marc Perkel schrieb: Actually the fastest way to get rid of stoc/botnet spam is with fake MX records. fake 10 real 20 fake 30 fake 40 I dont like the idea of making life harder for ham (forcing a properly working mailserver to make at least 2 connections) acompanied with the same delays as

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread Marc Perkel
arni wrote: Marc Perkel schrieb: That doesn't answer his question though. He didn't ask for your opinion about if he needed it. If the rules were working for him he wouldn't be asking for help. When someone asks a question telling them they don't need it is generally the wrong answer and a

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread arni
Marc Perkel schrieb: That doesn't answer his question though. He didn't ask for your opinion about if he needed it. If the rules were working for him he wouldn't be asking for help. When someone asks a question telling them they don't need it is generally the wrong answer and a waste of time.

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread Marc Perkel
arni wrote: Suhas Ingale schrieb: Can someone help me writing rules to catch below content spam? * 5.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.] * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS * 5.

Re: Help in writing rules to catch SREA stock spams

2007-06-22 Thread arni
Suhas Ingale schrieb: Can someone help me writing rules to catch below content spam? * 5.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.] * 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS * 5.0 BOTNET Relay