Re: Bayes Implementation + Auto Whilte Listing

2008-02-19 Thread Tarak Ranjan
i want to implement bayesian Filtering site-wide and Auto whitelisting site-wide.. anyone help me regarding this setup http://wiki.apache.org/spamassassin/SiteWideBayesSetup sa-learn --spam -C /etc/mail/spamassassin --showdots --dir /path/to/directory/full/of/spam/msgs

Re: Nice girl like to chat spam

2008-02-19 Thread Justin Mason
Chris writes: On Monday 18 February 2008 6:29 am, ram wrote: On Mon, 2008-02-18 at 06:14 -0600, Chris wrote: On Monday 18 February 2008 4:33 am, ItsMikeE wrote: For some time now I have been getting spams that look like Hello! I am tired this evening. I am nice girl that would like

Re: telnet port 783 from external network

2008-02-19 Thread Daryl C. W. O'Shea
Agnello George wrote: spamd --listen-ip=0.0.0.0 http://0.0.0.0 --allowed-ips=121.240.XX.X the child process gets spawned That's fine, for testing anyway... later when you want to daemonize be sure to use the -d option rather than . but when i telnet from 121.240.XX.X it tries to connect

Re: Using network tests

2008-02-19 Thread Rob Wright
On Monday 18 February 2008 11:25:21 Karsten Bräckelmann wrote: On Mon, 2008-02-18 at 10:56 -0600, Rob Wright wrote: Greetings all. I'm using 3.2.4 on Debian Etch. I'm not sure that I'm actually getting network tests run. spamassassin -D --lint yields this in the plugins section: The

Re: Nice girl like to chat spam

2008-02-19 Thread --[ UxBoD ]--
Resolved. Cleared my sa-keys directory and re-imported them all. Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845

Re: Bayes: What am I missing

2008-02-19 Thread comparity
Luis Hernn Otegui wrote: 2008/2/17, comparity [EMAIL PROTECTED]: I have found that in the last few months a lot of mail has been coming through. I believe that the bayes filter isn't working. None of the caught messages include a bayes score. I have dutifully put all of my

{Spam?} RE: Nice girl like to chat spam

2008-02-19 Thread Randal, Phil
Unfortunately she changes the .info domain as often as she changes her knickers. :-p Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Michael Hutchinson [mailto:[EMAIL PROTECTED] Sent: 18 February 2008 20:10 To:

Re: telnet port 783 from external network

2008-02-19 Thread --[ UxBoD ]--
what does netstat -an | grep 783 show ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone:

Re: telnet port 783 from external network

2008-02-19 Thread Agnello George
On 2/19/08, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Agnello George wrote: spamd --listen-ip=0.0.0.0 http://0.0.0.0 --allowed-ips=121.240.XX.X the child process gets spawned That's fine, for testing anyway... later when you want to daemonize be sure to use the -d option rather than .

[OT] Bogus MX opinions

2008-02-19 Thread Francesco Abeni
Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low priority MX record which

Re: telnet port 783 from external network

2008-02-19 Thread Agnello George
On 2/19/08, Agnello George [EMAIL PROTECTED] wrote: On 2/19/08, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Agnello George wrote: spamd --listen-ip=0.0.0.0 http://0.0.0.0 --allowed-ips=121.240.XX.X the child process gets spawned That's fine, for testing anyway... later when you want

Re: telnet port 783 from external network

2008-02-19 Thread Agnello George
On 2/19/08, Matt Kettler [EMAIL PROTECTED] wrote: Agnello George wrote: Hi I can tel net port 783 on localhost ... but cant telnet it remotely ...how is that done ...thanks You can do this using spamd's -i parameter: From man spamd: **-i* [/ipaddress/], *--listen-ip*[=/ipaddress/],

spamd: checking message ..........for(unknown):500

2008-02-19 Thread Agnello George
I have smatermail connecting to my remote system by startin spamd as follows : spamd -u spamd -d -i -s /var/log/spamd.log --allowed-ips 216.185. thnen wheni chk the logs i get the following ...why does it show for (unknown):500 .. is this a error Tue Feb 19 19:13:49 2008 [8182] info: spamd:

Re: spamd: checking message ..........for(unknown):500

2008-02-19 Thread Matus UHLAR - fantomas
On 19.02.08 17:17, Agnello George wrote: I have smatermail connecting to my remote system by startin spamd as follows : spamd -u spamd -d -i -s /var/log/spamd.log --allowed-ips 216.185. thnen wheni chk the logs i get the following ...why does it show for (unknown):500 .. is this a

Re: Nice girl like to chat spam

2008-02-19 Thread --[ UxBoD ]--
sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org error: GPG validation failed! The update downloaded successfully, but it was not signed with a trusted GPG key. Instead, it was signed with the following keys: 6C6191E3 I recall seeing this on the list a while ago. How do you fix

How to Know

2008-02-19 Thread Tarak Ranjan
Hi List, how do i come to know that each and every incoming outgoing mail is massing through SA. / Tarak Chat on a cool, new interface. No download required. Go to http://in.messenger.yahoo.com/webmessengerpromo.php

RE: [OT] Bogus MX opinions

2008-02-19 Thread Thomas Raef
Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low priority MX record

Re: How to Know

2008-02-19 Thread Diego Pomatta
Tarak Ranjan escribió: Hi List, how do i come to know that each and every incoming outgoing mail is massing through SA. / Tarak You can check spamd logs. I also see it in my qmail smtpd logs. Also, in every incoming mail's header you should see some added lines, like:

Re: How to Know

2008-02-19 Thread Francesco Abeni
Tarak Ranjan ha scritto: Hi List, how do i come to know that each and every incoming outgoing mail is massing through SA. What about looking at the full headers of the received message? This seems to me the quickest way. This is a little different depending on your mail client, but once

Re: Suspicious rcfile

2008-02-19 Thread timinator08
Yes, I modified the permissons on the users home directory (more strict) and SA/procmail began working. Karsten Bräckelmann-2 wrote: On Mon, 2008-02-18 at 09:39 -0800, timinator08 wrote: Hi, I'm setting up a user with spamassassin but unable to get it working. The following is from the

Re: How to Know

2008-02-19 Thread Agnello George
On 2/19/08, Tarak Ranjan [EMAIL PROTECTED] wrote: Hi List, how do i come to know that each and every incoming outgoing mail is massing through SA. did'nt get your question massing through SA. ?? -- Regards Agnello Dsouza www.linux-vashi.blogspot.com www.bible-study-india.blogspot.com

Re: How to Know

2008-02-19 Thread Tarak Ranjan
--- Agnello George [EMAIL PROTECTED] wrote: how do i come to know that each and every incoming outgoing mail is massing through SA. did'nt get your question massing through SA. ?? -- Regards Agnello Dsouza how do i come to know that each and every incoming outgoing mail is

Re: telnet port 783 from external network

2008-02-19 Thread Matt Kettler
Agnello George wrote: On 2/19/08, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: but when i telnet from 121.240.XX.X it tries to connect ..but the connection brakes after 30 seconds spamd isn't exactly a telnet server for humans, it's not going to greet you. :) if it does

Re: [OT] Bogus MX opinions

2008-02-19 Thread Michael Scheidell
From: Francesco Abeni [EMAIL PROTECTED] Date: Tue, 19 Feb 2008 11:55:59 +0100 To: users@spamassassin.apache.org Subject: [OT] Bogus MX opinions Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to

Re: telnet port 783 from external network

2008-02-19 Thread Daryl C. W. O'Shea
Agnello George wrote: i have checked the logs and mail sacnning is happeing :-) ... but what i see is the following in the logs : Feb 19 18:37:52 vps1 spamd[7508]: spamd: still running as root: user not specified with -u, not found, or set to root, falling back to nobody It means that

Re: telnet port 783 from external network

2008-02-19 Thread Agnello George
On 2/19/08, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Agnello George wrote: i have checked the logs and mail sacnning is happeing :-) ... but what i see is the following in the logs : Feb 19 18:37:52 vps1 spamd[7508]: spamd: still running as root: user not specified with -u, not

Re: telnet port 783 from external network

2008-02-19 Thread Agnello George
On 2/19/08, Matt Kettler [EMAIL PROTECTED] wrote: Agnello George wrote: On 2/19/08, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: but when i telnet from 121.240.XX.X it tries to connect ..but the connection brakes after 30 seconds spamd isn't exactly a telnet server for humans, it's

Re: [OT] Bogus MX opinions

2008-02-19 Thread Francesco Abeni
Thomas Raef ha scritto: (...) I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low priority MX record which points at a non-smtp server. I'd like to know some first-hand experience about two questions.

Re: user_prefs: mind the linebreak

2008-02-19 Thread Karsten Bräckelmann
This is bug 5442, btw. On Mon, 2008-02-18 at 23:54 -0500, Daryl C. W. O'Shea wrote: For what? The only config lines that I can think of that are really long are for rules. We're certainly not going to go sticking backslashes in the middle of regexes. Not necessarily in the middle of REs,

WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Shanx
As you will see from the headers, for some reason it is still forcing a test against Required Score of 2.5. I am trying to see where it is getting this instruction of 2.5 from. 1. In my server-wide /etc/mail/spamassassin/local.cf I have this: required_score 12 2. In my user_prefs for an

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Justin Mason
Rubin Bennett writes: P.S.: List Admins: Is there a way to toss Nabble postings automatically? They annoy the hell out of me, and I suspect I'm not alone :) Actually, Nabble posting is fine. Please avoid setting list policy without being invited to do so ;) --j.

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Rob McEwen
Andy Dills wrote: ...the people in charge of uribl.com have decided to set a pretty low threshold for blacklisting DNS servers from querying, demanding that people who hit that threshold pay them a rather exorbitant rate for a data feed. Andy, Does the fee you describe pay for (a) being

RE: [OT] Bogus MX opinions

2008-02-19 Thread Bowie Bailey
Francesco Abeni wrote: Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low

Re: [OT] Bogus MX opinions

2008-02-19 Thread Francesco Abeni
Bowie Bailey ha scritto: Francesco Abeni wrote: (...) I'd like to implement a Bogus MX ... I would say that it is too risky to put a non-smtp host as your primary MX. There are some servers which will have a problem with that setup and either be unable to deliver mail to you or delay the

RE: [OT] Bogus MX opinions

2008-02-19 Thread Bowie Bailey
Francesco Abeni wrote: Bowie Bailey ha scritto: Francesco Abeni wrote: (...) I'd like to implement a Bogus MX ... I would say that it is too risky to put a non-smtp host as your primary MX. There are some servers which will have a problem with that setup and either be unable to

RE: [OT] Bogus MX opinions

2008-02-19 Thread James E. Pratt
-Original Message- From: Francesco Abeni [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 19, 2008 11:12 AM To: users@spamassassin.apache.org Spamassassin Subject: Re: [OT] Bogus MX opinions Something else that can be useful is using an MTA blacklist. I use the zen.spamhaus.org

Re: WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Stephen Sloan
In many cPanel installations the spamassassin setup ignores local.cf and user_prefs in favor of a server wide setup. You may wish to contact your provider to see if local.cf can be enabled for your setup. On Feb 19, 2008 9:01 AM, Shanx [EMAIL PROTECTED] wrote: As you will see from the headers,

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Andy Dills
On Tue, 19 Feb 2008, Rob McEwen wrote: Andy Dills wrote: ...the people in charge of uribl.com have decided to set a pretty low threshold for blacklisting DNS servers from querying, demanding that people who hit that threshold pay them a rather exorbitant rate for a data feed. Andy,

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Karsten Bräckelmann
On Tue, 2008-02-19 at 14:58 +, Justin Mason wrote: Rubin Bennett writes: P.S.: List Admins: Is there a way to toss Nabble postings automatically? They annoy the hell out of me, and I suspect I'm not alone :) Actually, Nabble posting is fine. Please avoid setting list policy

Re: How to Know

2008-02-19 Thread John Hardin
On Tue, 19 Feb 2008, Tarak Ranjan wrote: how do i come to know that each and every incoming outgoing mail is massing through SA. Check your MTA logs. My MTA logs the score and rules hit for every message processed through SA. Messages that don't pass through SA will have other MTA log

Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
Hi all, Getting tones of this sort of email through have been learning it as spam for the last few days but so far not much luck. --start of message 2 examples Aloha,*** Real men!* Milliions of people acrosss the world have already tested THIS Goedendag, *** Real men!* * *MMillions of

RE: telnet port 783 from external network

2008-02-19 Thread Robert - elists
Probably /var/log/maillog or wherever syslog logs your mail facility. Daryl Daryl, Hey, that is kinda neat... telnet localhost 783 Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. PING SPAMC/1.0 SPAMD/1.4 0 PONG Connection closed by foreign

Re: Suggestions to block this spam

2008-02-19 Thread --[ UxBoD ]--
please post a URL to a sample message, or via pastebin so that we can run it through our installations and see what it hits. what is your SA installation hitting and scoring it as ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint:

Re: Suggestions to block this spam

2008-02-19 Thread Loren Wilton
The url to pastebin is http://pastebin.ca/910275 apologies if this is wrong - its my first time using pastebin. That appears to be the message body, but we would ideally like to see the entire message with all of the headers. There is a lot of data in headers that makes the spam easier to

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-19 Thread Kris Deugau
Philip Prindeville wrote: I'd rather suffer a few broken applications, or in this case, a user having to cut a domain name out of an email and paste it into a web browser and not be able to simply click through the message body, if it helps maintain the clear distinction between well-formed

Re: Nice girl like to chat spam

2008-02-19 Thread Kris Deugau
ItsMikeE wrote: For some time now I have been getting spams that look like Hello! I am tired this evening. I am nice girl that would like to chat with you. Email me at [EMAIL PROTECTED] only, because I am using my friend's email to write this. To see my pics They are still not being picked up,

Re: Suggestions to block this spam

2008-02-19 Thread Bob Proulx
Kathryn Allan wrote: The url to pastebin is http://pastebin.ca/910275 apologies if this is wrong - its my first time using pastebin. Your pastebin of the message body was good. Normally it would be better to paste the full headers in too so that we can run the message through the tools

Re: [OT] Bogus MX opinions

2008-02-19 Thread mouss
Francesco Abeni wrote: Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
Hi Bob, Thanks I will try the suggestions in the other post. I have updated the pastebin with header - i think : ) http://pastebin.ca/910315 Thanks again Kate Bob Proulx wrote: Kathryn Allan wrote: The url to pastebin is http://pastebin.ca/910275 apologies if this is wrong - its my first

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
Hmm the update changed the link i think http://pastebin.ca/910320 Bob Proulx wrote: Kathryn Allan wrote: The url to pastebin is http://pastebin.ca/910275 apologies if this is wrong - its my first time using pastebin. Your pastebin of the message body was good. Normally it would be

Re: Suggestions to block this spam

2008-02-19 Thread Karsten Bräckelmann
On Wed, 2008-02-20 at 10:36 +1300, Kathryn Allan wrote: Thanks I will try the suggestions in the other post. I have updated the pastebin with header - i think : ) http://pastebin.ca/910315 It is a multipart/alternative message -- in this case HTML. ;) For reference, please, always paste the

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
I have removed the extras and changed the expiry. http://pastebin.ca/910360 Thanks for the help Kate Karsten Bräckelmann wrote: On Wed, 2008-02-20 at 10:36 +1300, Kathryn Allan wrote: Thanks I will try the suggestions in the other post. I have updated the pastebin with header - i think :

Re: Suggestions to block this spam

2008-02-19 Thread Bob Proulx
Karsten Bräckelmann wrote: It is a multipart/alternative message -- in this case HTML. ;) For reference, please, always paste the entire, raw message. Don't copy-n-paste what your MUA displays as body. (I was going to reply to your previous mail, but you beat me to it.) Definitely posting

Re: Suggestions to block this spam

2008-02-19 Thread Bazooka Joe
I too am getting dozens of these emails that are going right through SA + pyzor + dcc. sa-learn doesn't seem to make any difference. I just installed razor2 today to try to combat real men. Most get through w/ a score of 2 or less. Many of them seem to trigger spamcop so i bumped that up to

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Dallas Engelken
Andy Dills wrote: It appears (from email recently sent to the admins of a few small mailservers I help admin) that the people in charge of uribl.com have decided to set a pretty low threshold for blacklisting DNS servers from querying, demanding that people who hit that threshold pay them a

Re: Suggestions to block this spam

2008-02-19 Thread Karsten Bräckelmann
On Wed, 2008-02-20 at 09:13 +1300, Kathryn Allan wrote: Getting tones of this sort of email through have been learning it as spam for the last few days but so far not much luck. Now that we've settled on the technical difficulties of pastebins, and since we've all seen that one before

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Andy Dills
On Tue, 19 Feb 2008, Dallas Engelken wrote: Filtering the top 0.45% IPs results in 20% fewer queries/second to the mirrors. I dont see trying to limit excessive bandwidth usage on donated mirrors as an obnoxious stance. The obnoxious stance comment is in demanding payment for reducing the

Re: Suggestions to block this spam

2008-02-19 Thread Duane Hill
On Tue, 19 Feb 2008 14:21:53 -0800 Bazooka Joe [EMAIL PROTECTED] wrote: I too am getting dozens of these emails that are going right through SA + pyzor + dcc. sa-learn doesn't seem to make any difference. I just installed razor2 today to try to combat real men. Most get through w/ a score

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
I just implemented Justins ruleset and it looks as if they will now be caught YAY thanks for the tip. Has anyone had trouble with fp's using this ruleset the ones its hitting seem to score high (4) Thanks Kate Bob Proulx wrote: Kathryn Allan wrote: The url to pastebin is

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread SM
At 15:33 19-02-2008, Andy Dills wrote: load on your servers. All of the other RBLs that I'm aware of (could be wrong) are happy to provide data feeds free of charge. To be perfectly Some RBLs do charge if your organization is doing more than X queries daily. Regards, -sm

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Shanx
Rubin Bennett wrote: If you want to post to this list, please subscribe like a regular user, and do your research first before you post. Nabble, in a word, sucks. When the SpamAssassin mailing list page stops recommending Nabble, perhaps users will stop posting from Nabble.

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Evan Platt
At 06:39 AM 2/19/2008, Rubin Bennett wrote: If you want to post to this list, please subscribe like a regular user, and do your research first before you post. Nabble, in a word, sucks. It fences your posts as being from a subscribed address when in fact it's not, and Nabble is not a forum at

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Duane Hill
On Tue, 19 Feb 2008 09:25:41 -0500 (EST) Andy Dills [EMAIL PROTECTED] wrote: It appears (from email recently sent to the admins of a few small mailservers I help admin) that the people in charge of uribl.com have decided to set a pretty low threshold for blacklisting DNS servers from

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Shanx
Karsten Bräckelmann-2 wrote: You sure about that? They don't understand the very basics of email. They just managed *again* to send the very same Message-Id *twice*. Yeah, the Nabble folks I am subscribed to this list. Perhaps whoever manages the SA list page

Re: WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Shanx
Stephen Sloan-4 wrote: In many cPanel installations the spamassassin setup ignores local.cf and user_prefs in favor of a server wide setup. You may wish to contact your provider to see if local.cf can be enabled for your setup. Thanks Stephen. How and where can we enable local.cf for

How to Know

2008-02-19 Thread Tarak Ranjan
Hi List, how do i come to know that each and every incoming outgoing mail is massing through SA. / Tarak

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Jason Haar
Andy Dills wrote: For instance, if we ran a cacheing nameserver on each of our mailservers, would you have ever noticed us? Err - are you saying you are generating 500K requests/day against that ONE RBL domain - and you are *not* running a caching server?!?!? [Hell, I even run a caching

RE: Nice girl like to chat spam

2008-02-19 Thread Michael Hutchinson
I've actually been running this set of 5 rules on several of the ISP mail systems I've got my fingers in (watch for line wrap, sorry): # Nice girl wants to send pics, but only if you email the address in the body # start scoring at .5, see how that whacks'em. body NICE_GIRL_01

RE: How to Know

2008-02-19 Thread Jean-Paul Natola
From: Tarak Ranjan [mailto:[EMAIL PROTECTED] Sent: Tue 2/19/2008 7:23 To: Spamassassin Subject: How to Know Hi List, how do i come to know that each and every incoming outgoing mail is massing through SA. / Tarak For incoming, look at the

RE: Suggestions to block this spam

2008-02-19 Thread Michael Hutchinson
-Original Message- From: Bazooka Joe [mailto:[EMAIL PROTECTED] Sent: Wednesday, 20 February 2008 11:22 a.m. To: users@spamassassin.apache.org Subject: Re: Suggestions to block this spam I too am getting dozens of these emails that are going right through SA + pyzor + dcc.

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Matthias Schmidt
Am/On Tue, 19 Feb 2008 16:49:34 -0800 schrieb/wrote Evan Platt: At 06:39 AM 2/19/2008, Rubin Bennett wrote: If you want to post to this list, please subscribe like a regular user, and do your research first before you post. Nabble, in a word, sucks. It fences your posts as being from a

RE: How to Know

2008-02-19 Thread Michael Hutchinson
-Original Message- From: Tarak Ranjan [mailto:[EMAIL PROTECTED] Sent: Wednesday, 20 February 2008 1:24 a.m. To: Spamassassin Subject: How to Know Hi List, how do i come to know that each and every incoming outgoing mail is massing through SA. / Tarak Hmm. Is this Spam?

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Rubin Bennett
On Tue, 2008-02-19 at 16:49 -0800, Evan Platt wrote: At 06:39 AM 2/19/2008, Rubin Bennett wrote: If you want to post to this list, please subscribe like a regular user, and do your research first before you post. Nabble, in a word, sucks. It fences your posts as being from a subscribed

RE: Suggestions to block this spam

2008-02-19 Thread Karsten Bräckelmann
On Wed, 2008-02-20 at 14:26 +1300, Michael Hutchinson wrote: You'll be lucky to catch them on anything other than phrase matching, as they're very simple in design, those spam messages. Much like the downlooadable sooftware one's we used to get. To a program, there's not much that looks like

Re: Nice girl like to chat spam

2008-02-19 Thread Bob Proulx
Michael Hutchinson wrote: body NICE_GIRL_01 /Hello! I am (?:bored|tired) (?:today|this (?:afternoon|evening)|tonight)\./ Forgive my ignorance, but what does the question mark and colon do at the start of the brackets? I have (bored|tired) in my own rules, so how does (?:bored|tired)

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Shanx
Rubin Bennett wrote: the lack of information relevant to this mailing list and it's source prompted me to send perhaps a stronger response than was necessary. This is the SpamAssassin users list. For people who are using SpamAssassin and having trouble with it. My post was absolutely

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Karsten Bräckelmann
On Tue, 2008-02-19 at 16:48 -0800, Shanx wrote: Karsten Bräckelmann-2 wrote: Ye flippin gods, my Nabble name for this email address. Damn, why don't they just accept that my real name does not have any number in it? They don't understand the very basics of email. They just managed *again*

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Shanx
Karsten Bräckelmann wrote: Did you by any chance edit your post? No, I clicked the Resend button. Not Nabble's fault. The SA mailing list says on its page that posting from Nabble without registering for the list is fine. But it's not. I need to register, then I can use the Nabble

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Karsten Bräckelmann
On Tue, 2008-02-19 at 18:40 -0800, Shanx wrote: Rubin Bennett wrote: FWIW, Nabble sends all emails ONCE (as the mailing list would). [...] Nabble *does* send multiple emails re-using the very same Message-Id, if one edits their forum post. [...] I'm not sure what your little ramble is about

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Andy Dills
On Wed, 20 Feb 2008, Jason Haar wrote: Andy Dills wrote: For instance, if we ran a cacheing nameserver on each of our mailservers, would you have ever noticed us? Err - are you saying you are generating 500K requests/day against that ONE RBL domain - and you are *not* running a caching

FW: Suggestions to block this spam

2008-02-19 Thread Michael Hutchinson
-Original Message- From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] Sent: Wednesday, 20 February 2008 3:33 p.m. To: users@spamassassin.apache.org Subject: RE: Suggestions to block this spam On Wed, 2008-02-20 at 14:26 +1300, Michael Hutchinson wrote: You'll be lucky to catch

FW: Nice girl like to chat spam

2008-02-19 Thread Michael Hutchinson
-Original Message- Michael Hutchinson wrote: body NICE_GIRL_01 /Hello! I am (?:bored|tired) (?:today|this (?:afternoon|evening)|tonight)\./ Forgive my ignorance, but what does the question mark and colon do at the start of the brackets? I have (bored|tired) in my own

Re: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Karsten Bräckelmann
On Tue, 2008-02-19 at 18:59 -0800, Shanx wrote: Karsten Bräckelmann wrote: That name's fine. :) Did you by any chance edit your post? No, I clicked the Resend button. Not Nabble's fault. The SA mailing list says on its page that posting from Nabble without registering for the list is

Re: FW: Suggestions to block this spam

2008-02-19 Thread Karsten Bräckelmann
On Wed, 2008-02-20 at 16:08 +1300, Michael Hutchinson wrote: From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] On Wed, 2008-02-20 at 14:26 +1300, Michael Hutchinson wrote: You'll be lucky to catch them on anything other than phrase matching, as they're very simple in design, those spam

Re: [OT] Bogus MX opinions - YES - it works!

2008-02-19 Thread Marc Perkel
Thomas Raef wrote: Good morning everyone, i'm in charge of reducing SPAM at a customer site. Already have SPAMASSASSIN, sa-update weeklyexecuted. I'd like to implement a Bogus MX for further filtering of SPAM. I don't know if this is the correct name, by Bogus MX i mean setting up a low

Re: Time to make multi.uribl.org optional rather than default?

2008-02-19 Thread Matt Kettler
Dallas Engelken wrote: Superb. Thats all you had to do in the first place without raising a stink. Aww, but it's so much more fun to post an inflammatory rant at the start of a message. :-) insert comment about any sports team sucking here... preferably a baseball team. If SA wants to

RE: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Robert - elists
This is the SpamAssassin users list. For people who are using SpamAssassin and having trouble with it. My post was absolutely within the remit of this list. And I provided as much information as I thought was relevant, including the header tags added by SA, the local.cf file, the

RE: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Shanx
Robert - elists-2 wrote: Since you posted that you do not mind using a console shell, you could always do what everyone else does and do some debugging and research and post your results... Funnily enough that's the useful response. This would be a much more useful list if instead of

RE: [WRONG PLACE TO ASK THIS] WHM/Cpanel: Where are the Server-wide SpamAssassin settings?

2008-02-19 Thread Robert - elists
Funnily enough that's the useful response. This would be a much more useful list if instead of pouncing on non-experts with tangential rants people simply offered a link or two, or said precisely what kind of test info is needed. I have now seen these pages: