Re: sought rules updates

2008-12-09 Thread Nigel Frankcom
I haven't seen an update from sa-update in months. What version is current? I have dbg: dns: 5.2.3.updates.spamassassin.org = 709395, parsed as 709395 showing here. This even after a dns crash and replace. Nigel On Tue, 9 Dec 2008 09:39:11 +0100, Leveau Stanislas [EMAIL PROTECTED] wrote: Hi

Re: sought rules updates

2008-12-09 Thread Leveau Stanislas
the current Sought version : # UPDATE version 320722979 and spamassassin : # UPDATE version 709395 I haven't seen an update from sa-update in months. What version is current? I have dbg: dns: 5.2.3.updates.spamassassin.org = 709395, parsed as 709395 showing here. This even after a dns

heads up: php5 security and emergency fix

2008-12-09 Thread Michael Scheidell
Last week, a security bullet was released about security problems with php5 prior to version 5.2.7. Yesterday, a major regression testing problem was fixed in 5.2.7, with the removal of the 5.2.7 binaries, and the emergency release of 5.2.8. (so, if you tried to upgrade, or are freebsd users

Re: sought rules updates

2008-12-09 Thread Karsten Bräckelmann
On Mon, 2008-12-08 at 20:00 -0600, Chris wrote: Has anyone seen any updates to the sought rules lately? It seems like it's been about 4 or 5 days now since I've seen any via sa-update. I believe this is due to the recent SSL cert update for ASF svn. Changed without a heads up in advance... :(

Re: sought rules updates

2008-12-09 Thread Karsten Bräckelmann
On Tue, 2008-12-09 at 08:51 +, Nigel Frankcom wrote: I haven't seen an update from sa-update in months. What version is current? Nigel, Chris wasn't talking about the stock rule-set, but the third-party JM_SOUGHT rules. The latter usually are updated multiple times a day, while the stock

Re: Detecting Porn photos

2008-12-09 Thread Karsten Bräckelmann
A: No. Q: Should I put my reply above quoted text? On Mon, 2008-12-08 at 21:14 -0600, Luis Daniel Lucio Quiroz wrote: Has anyone try this? http://prag.diee.unica.it/n3ws1t0/imageCerberus Luis, seriously -- what the...? Come on, why did you Cc me on that question? I clearly stated I don't

Re: Twist on Day Old Bread list idea

2008-12-09 Thread jp
I think this would be a good DNS based list. It could have a slightly longer TTL than most DNS lists, as it's timeline would be generally pretty predictable. This would make the DNS caching an effective and efficient way to utilize the data. I'd like to be able to implement it such as if the

Re: Spam slipping through

2008-12-09 Thread LuKreme
On 8-Dec-2008, at 00:44, mouss wrote: DKIM is not a blacklister, but a whitelist based on if sender really use monster.com mta mail server or not :) indeed. Checking my SPAM folder it seems that a LOT of spam gets DKIM_VERIFIED I have tons that look, essentially, like this:

Re: sought rules updates

2008-12-09 Thread LuKreme
On 9-Dec-2008, at 08:15, Karsten Bräckelmann wrote: On Tue, 2008-12-09 at 08:51 +, Nigel Frankcom wrote: I haven't seen an update from sa-update in months. What version is current? Nigel, Chris wasn't talking about the stock rule-set, but the third-party JM_SOUGHT rules. The latter

Re: sought rules updates

2008-12-09 Thread Bill Landry
LuKreme wrote: On 9-Dec-2008, at 08:15, Karsten Bräckelmann wrote: On Tue, 2008-12-09 at 08:51 +, Nigel Frankcom wrote: I haven't seen an update from sa-update in months. What version is current? Nigel, Chris wasn't talking about the stock rule-set, but the third-party JM_SOUGHT rules.

Re: sought rules updates

2008-12-09 Thread LuKreme
On 9-Dec-2008, at 12:48, LuKreme wrote: I'm thtinking the old rules like 70_sc_top200.cf etc should all be removed? Just to be clear, all I have currently active is: -rw-r--r-- 1 root wheel3278 Dec 9 12:30 dkim.cf -rw-r--r-- 1 root wheel1749 Dec 7 17:08 init.pre drwx-- 2

Re: sought rules updates

2008-12-09 Thread John Hardin
On Mon, 8 Dec 2008, Chris wrote: Has anyone seen any updates to the sought rules lately? It seems like it's been about 4 or 5 days now since I've seen any via sa-update. Ditto here. [EMAIL PROTECTED] $ ll /var/lib/spamassassin/3.001008/sought_rules_yerp_org total 320 -rw-r--r-- 1 root root

Problem with faked return-path or something like that...!

2008-12-09 Thread hofmae
Hi there, i hope someone can help, i surfed the whole web with no answer... We are using Communigate Pro with Spamassasin, now we have a problem with specific spammail and don't know how to solve it. The spammer sends us spam e-mails which includes as return-path one of our mail-adressess. So

Re: Problem with faked return-path or something like that...!

2008-12-09 Thread Benny Pedersen
On Tue, December 9, 2008 23:37, hofmae wrote: i hope someone can help, i surfed the whole web with no answer... problem is not the fake return path, its problem is that you bounce invalid recipient, and the spammers know that We are using Communigate Pro with Spamassasin, now we have a

Re: sought rules updates

2008-12-09 Thread LuKreme
On 9-Dec-2008, at 12:58, Bill Landry wrote: Both the official SA rules and 3rd party rules can be updated via sa-update. For information and instructions, see: http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt Ah yes, I remember a lot of those from the days run rjd. Geez

Re: sought rules updates

2008-12-09 Thread John Horne
On Tue, 2008-12-09 at 16:50 -0700, LuKreme wrote: On 9-Dec-2008, at 12:58, Bill Landry wrote: Both the official SA rules and 3rd party rules can be updated via sa-update. For information and instructions, see: http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt Ah yes, I

Re: Spam slipping through

2008-12-09 Thread John Hardin
On Tue, 2008-12-09 at 12:40 -0700, LuKreme wrote: Checking my SPAM folder it seems that a LOT of spam gets DKIM_VERIFIED So it looks like the only usefulness of DKIM for spam checking is really for the big mailers like gmail, paypal, ebay, etc? The usefulness of SPF, DKIM and related

google groups abuse for spam

2008-12-09 Thread ram
I got a spam with just a link to a google groups page https://ecm.netcore.co.in/tmp/spam_google.txt Now I am scoring all mails with links to groups.google but (may not be a gr8 idea though )

Re: sought rules updates

2008-12-09 Thread LuKreme
On 9-Dec-2008, at 17:09, John Horne wrote: Try: sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org Ok, that gives me no error (where did you find/get the 6C6191E3?). It sits for about 20-30 seconds and then I get a prompt back. But as far as I can tell, nothing has changed.

Re: 1000 times easier to just do sa-update --nogpg

2008-12-09 Thread LuKreme
On 5-Sep-2008, at 15:32, mouss wrote: curl -o sa.gpg http://spamassassin.apache.org/updates/GPG.KEY echo 24F434CE gpg.keys sa-update --import sa.gpg echo updates.spamassassin.org channel.list curl -o jm.gpg http://yerp.org/rules/GPG.KEY echo 6C6191E3 gpg.keys sa-update --import jm.gpg echo

Re: 1000 times easier to just do sa-update --nogpg

2008-12-09 Thread Theo Van Dinter
On Tue, Dec 09, 2008 at 10:54:23PM -0700, LuKreme wrote: echo 24F434CE gpg.keys echo 6C6191E3 gpg.keys echo 856AA88A gpg.keys The three lines that are echo HEXCODE gpg.keys are the issue for me, I guess. Where do those numbers come from? They're the keyids for the given channels

Re: 1000 times easier to just do sa-update --nogpg

2008-12-09 Thread LuKreme
On 9-Dec-2008, at 23:11, Theo Van Dinter wrote: On Tue, Dec 09, 2008 at 10:54:23PM -0700, LuKreme wrote: curl -o sa.gpg http://spamassassin.apache.org/updates/GPG.KEY echo 24F434CE gpg.keys sa-update --import sa.gpg echo updates.spamassassin.org channel.list The three lines that are

Re: sought rules updates

2008-12-09 Thread Duane Hill
On Tue, 9 Dec 2008, LuKreme wrote: (where did you find/get the 6C6191E3?). Not too hard: Do a search for 'sought' on the SA wiki page (which is linked off of http://spamassassin.apache.org/): http://wiki.apache.org/spamassassin/ The very first link provided this: