Loren Wilton wrote:
Subject:raw. The charset stuff has been stripped out by the time it is just
Subject.
Loren
Beauty. Thanks.
-Philip
Hi,
There's lately a bunch of new spam who has Fw: 12345 in the subject (for
example). All this spam dies nicely with Bayes and other regular rules. I'd
like to know, anyway, how could I write a rule that would catch it. This
spam has a common element for every one of its mails. For example,
Ruben Cardenal wrote:
To: [EMAIL PROTECTED]
Subject: /^Fw:\s\d{3,6}$/
In the body of the mail:
/^Subject:\sjohn$/
How could a rule score catch those 3 things at a time? I know how to
do it for the headers part (someone in this lists told me how), but I
don't know how to relate that
Marco,
Thanks, but I already know how to write meta rules :) That's not what I'm
asking. My example lines are not textual lines, but the form that spam
takes. It's not that simple.
Ruben.
-Mensaje original-
De: Marco Maske [mailto:[EMAIL PROTECTED]
Enviado el: domingo, 26 de
Ruben Cardenal wrote:
How could a rule score catch those 3 things at a time? I know how to do it
for the headers part (someone in this lists told me how), but I don't know
how to relate that line of the body with the To part of the headers. I
mean, the john word in that line of the body
Thanks Matt, I was curious, your explanation is enough :)
Ruben.
-Mensaje original-
De: Matt Kettler [mailto:[EMAIL PROTECTED]
Enviado el: domingo, 26 de febrero de 2006 17:01
Para: Ruben Cardenal
CC: Spamassassin
Asunto: Re: I catch all this spam, but just for curiosity...
[EMAIL PROTECTED] wrote:
[snip]
Hi Philip,
most phish works that way so it is probably worthwhile...
This question comes up every now and then, and everytime there are a couple of
responses
saying that many legitimate html mail contains similar stuff
a
Hello
all,
I posted on this
topic back in late January to no resolution. After spending most all of
this weekend doing research, I still am at a total loss, but do have clues on
getting my problem resolved.
Just a brief
history. I currently use the DirectAdmin (www.directadmin.com)
From: Bradley Walker [EMAIL PROTECTED]
When something goes wrong, What did I change last?
Of course that requires as a prerequisite making changes one at a time.
When you make two changes at once you must also ask, How do these two
products interact? It's no worse than managing your
On Sat, 25 Feb 2006, Chris Purves wrote:
hI,
I am not getting SPF_ hits for most messages that I expect should pass
SPF. On one message when I run through spamassassin with debug I see:
[5959] dbg: spf: checking HELO (helo=, ip=66.111.4.28)
[5959] dbg: spf: cannot get HELO, cannot use SPF
jdow wrote:
From: Chris Purves [EMAIL PROTECTED]
X-Spam-Report:
* 0.1 FORGED_RCVD_HELO Received: contains a forged HELO
* -1.3 AWL AWL: From: address is in the auto white-list
But if I run the same message from a user account with spamassassin
-t
... I get:
-100 USER_IN_WHITELIST
Matthias Fuhrmann wrote:
On Sat, 25 Feb 2006, Chris Purves wrote:
hI,
I am not getting SPF_ hits for most messages that I expect should pass
SPF. On one message when I run through spamassassin with debug I see:
[5959] dbg: spf: checking HELO (helo=, ip=66.111.4.28)
[5959] dbg: spf: cannot
Chris Purves wrote:
Chris Purves wrote:
I am not getting SPF_ hits for most messages that I expect should pass
SPF. On one message when I run through spamassassin with debug I see:
[5959] dbg: spf: checking HELO (helo=, ip=66.111.4.28)
[5959] dbg: spf: cannot get HELO, cannot use SPF
[5959]
I just committed version 01.00.09 of this ruleset to:
http://rulesemporium.com/rules/70_sare_stocks.cf
It should appear within the hour.
Enjoy.
-Doc (SA/SARE/URIBL/SURBL -- Ninja)
Yeah I sent this twice... forgot to add the right date to the subject. D'Oh!
I just committed version 01.00.09 of this ruleset to:
http://rulesemporium.com/rules/70_sare_stocks.cf
It should appear within the hour.
Enjoy.
-Doc (SA/SARE/URIBL/SURBL -- Ninja)
Title: Rejecting emails in procmailrc?
Hello,
How can I reject mails that have a high score along with a reason message instead of moving them to a folder?
I am using this in procmailrc to send spams to junk mail folder which works fine.
:0:
* ^X-Spam-Status: Yes
/${HOME}/'Junk
16 matches
Mail list logo
