Re: mailpolice point of contact

2004-10-19 Thread Bill Landry
- Original Message - From: Chris [EMAIL PROTECTED] Does anyone know of a POC to report phishing msgs that the mailpolice rbl misses? I sent an e-mail to a contact at MP to see who these could be sent to. You can also forward them to [EMAIL PROTECTED], which will get them

Re: Network tests not working after upgrade to SA 3

2004-10-11 Thread Bill Landry
- Original Message - From: Mike Brodbelt [EMAIL PROTECTED] Bill Landry wrote: - Original Message - From: Mike Brodbelt [EMAIL PROTECTED] Did you happen to check the INSTALL document that comes with the distribution?: - Net::DNS(from CPAN) Aha. Whoever

Re: A simple way to...

2004-10-10 Thread Bill Landry
- Original Message - From: Ryan Thompson [EMAIL PROTECTED] Robin Lynn Frank wrote to users@spamassassin.apache.org: We use SA 3.0.0 with MySQL so we can extract certain AWL data and use it at the MTA level. However, since SA doesn't have an auto-blacklist feature, Hi Robin,

Re: SPF not working

2004-10-04 Thread Bill Landry
- Original Message - From: Brett Romero [EMAIL PROTECTED] All of these entries are in the debug. So far, everything is setup and running as it should. Just nothing coming through on the reporting. Any suggestions? Sorry, don't know what else to tell you. I spawn SA via

Re: SPF not working

2004-10-02 Thread Bill Landry
- Original Message - From: Brett Romero [EMAIL PROTECTED] I've tried this but still don't get the SPF results. Any other suggestions? Does it only appear if the header info is non SPF? Or, when does it appear? No, the header and log entries will only appear if there is either a

Re: bogus sa-learn --dump magic report

2004-09-30 Thread Bill Landry
- Original Message - From: Theo Van Dinter [EMAIL PROTECTED] Run spamassassin with -D, it'll tell you what files its reading. Could be /usr/share/spamassassin/*.cf, user_prefs, etc. Okay, I created a test.cf file and added the following entries (with hyphens -): header

Re: bogus sa-learn --dump magic report

2004-09-29 Thread Bill Landry
- Original Message - From: Theo Van Dinter [EMAIL PROTECTED] On Wed, Sep 29, 2004 at 03:30:53PM -0700, Bill Landry wrote: Anyone have an idea why I would be getting the following output when I run sa-learn --dump magic: error: rule 'DNS_FROM_RFCI-PIGS' has invalid characters

Re: ANNOUNCE: SpamAssassin 3.0.0 is released

2004-09-22 Thread Bill Landry
- Original Message - From: Daniel Quinlan [EMAIL PROTECTED] Apache Software Foundation Announces SpamAssassin 3.0 Release Very sad that the Pyzor time-out issue never got resolved throughout the pre-release/RC process, since I reported the time-out issue very early on in the

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: Jason J. Ellingson [EMAIL PROTECTED] I'm sure someone thought of this, but I don't see it asked before... so... = 1) Person X regularly gets emails from Person Y (good friends) 2) Person Z is a bad guy... so he sends Person X a GTUBE email with a faked

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: Jason J. Ellingson [EMAIL PROTECTED] Okay, follow-up question: Where does SpamAssassin get the IP? Is it the oldest IP in the received headers (low), or the most recent (top)? If it is oldest (assuming originating IP), then that could be faked easily

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: Raymond Dijkxhoorn [EMAIL PROTECTED] We turned off AWL, we had a customer that forwarded two spam messages to our helpdesk, the third normal message never came in, since his AWL beat him... Probably should not be spam filtering postmaster/abuse/support

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: William Stearns [EMAIL PROTECTED] Good afternoon, Raymond, all, (Raymond, you probably already know this, but I wanted to quickly cover it for other people that may also be considering whether or not to use AWL). [SNIP] That's a different issue.

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: Raymond Dijkxhoorn [EMAIL PROTECTED] Probably unrealistic to expect customers to know how to bounce a message. Yes. Exactly my point. Much better to simply not spam filter critical e-mail accounts like postmaster/abuse/support/sales/etc. With around

Additional URIBL phish/fraud list

2004-09-18 Thread Bill Landry
This is a list that MailPolice hosts and I have been running it for a few hours and it has already flagged some phish and fraud e-mails. Here is some info about the list: http://rhs.mailpolice.com/#rhsfraud This is my configuration for SA 2.64 with the SpamCopURI plug-in: uri MP_URI_RBL

autolearn=no flag?

2004-09-15 Thread Bill Landry
I'm curious how to determine why a message gets flagged with autolearn=no, as shown below: X-Spam-Status: No, hits=-5.9 required=5.0 tests=AWL,NO_REAL_NAME autolearn=no version=2.60-spambr_20030926a Also, what does this version=2.60-spambr_20030926a mean? This was a very obvious pill spam

Re: autolearn=no flag?

2004-09-15 Thread Bill Landry
[Top Post] I'm actually running 2.64 (3.0 soon). Everyone, please disregard the former distraction and return to your regularly scheduled, bi-annual subject line debate... ;-) Bill - Original Message - From: Matt Kettler [EMAIL PROTECTED] To: Bill Landry [EMAIL PROTECTED]; users

Re: test

2004-09-15 Thread Bill Landry
Please let us all know if your test was successful... - Original Message - From: Michele Neylon : Blacknight Solutions [EMAIL PROTECTED] To: Spamassassin-Talk (E-mail) [EMAIL PROTECTED] Sent: Wednesday, September 15, 2004 11:01 AM Subject: test Test. -- Email scanned by

Re: SPF and spammers

2004-09-14 Thread Bill Landry
- Original Message - From: Codger [EMAIL PROTECTED] But the fact that they do create the SPF records then makes all the other rules like SURBL more effective. The strength they have had till SPF has been the fact that the could forge domains. If you already use a blacklisting

Re: Start an IP list to block?

2004-09-10 Thread Bill Landry
- Original Message - From: Jeff Chan [EMAIL PROTECTED] Would you care to share some of your strategies, perhaps off list? Share his strategies, yes, but also check out his product. MessageSniffer, it's a truly awesome spam-filtering product and runs very efficiently on Linux/BSD

Re: razor servers down?

2004-09-09 Thread Bill Landry
- Original Message - From: kaiser suse [EMAIL PROTECTED] BTW I have head of folly and joy, but where does one find the definitive list of cloudmark servers? Don't know if there is a master list somewhere, but here are the razor servers that I know of: folly.cloudmark.com

<    1   2   3