Re: Count length subject

2010-04-26 Thread Bob O'Brien
John Hardin wrote: On Mon, 26 Apr 2010, Mynabbler wrote: We experience quite a bit of spam with subjects like: - SexyCoedHoneysGetWildInTheseRealgfsPhotos - Make*each*of*your*intimate*acts*unforgettable*for*your*partner - HotGi'rlP,us'syF,u'c.kedByPigs -

Re: rsys4.com and Paypal?

2010-04-20 Thread Bob O'Brien
Kris Deugau wrote: I'd say it's *probably* legit. Very probably. Responsys IPs, with their customer clearly indicated in the PTRs 12.130.139.51 om-paypal-apac.rsys4.com. 12.130.139.52 om-paypal-eu1.rsys4.com. 12.130.139.53 om-paypal-na.rsys4.com. 12.130.139.54 om-paypal-eu2.rsys4.com.

Re: FROM_STARTS_WITH_NUMS matches on text-to-email

2010-04-12 Thread Bob O'Brien
Martin Gregorie wrote: However, there is one fairly straight forward question that can be easily answered: has anybody ever seen an all-number mailbox/user id in circumstances where it *isn't* a phone number? Yes. I have seen personal addresses with all-digit LHS. It's almost always been

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Bob O'Brien
Chris Richman wrote: Hi, Michelle. I've added those domains to our suppression list so they shouldn't receive email from us anymore. I wasn't able to add gnome.org because we have several users with confirmed gnome.org email addresses. I would like to recommend that you find a way to

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

2010-03-19 Thread Bob O'Brien
Michelle Konzack wrote: I could even say Block my domain tamay-dogan.net but what is IF one of my employees want to use LinedIn, Facebook or Twitter? This is exactly what I'm asking for. If my users choose to sign up, fine, let them use it and then /those/ addresses can receive

Re: [Emerging-Sigs] SIG: SpamAssassin Milter Plugin Remote Arbitrary Command Injection Attempt

2010-03-09 Thread Bob O'Brien
Noel Butler wrote: He has a point though, and why is it when people don't agree with someone the troll label comes out, FFS get over your selves. People always only half read, and then go half cocked, its called life, get used to it. In this case the troll label is more of an

Re: Hostkarma whitelist FP

2010-02-01 Thread Bob O'Brien
Mike Cardwell wrote: On 01/02/2010 17:31, Marc Perkel wrote: Yep - sutterhealth.org is a hospital. Making sure good email gets through is more important than a little bit of occasional spam. http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists And if you never send spam we want

Re: [OT] Leo Kuvayev

2009-12-30 Thread Bob O'Brien
jdow wrote: Guys, spam here kicked up 100% very recently, about the time I tweaked Richard. And it bears a Leo Kuvayev sort of stamp to it - porn, pharmaceuticals, etc. Watching spam patterns can be very interesting. Thinking that you know what one single stand-out data point means is

Re: HTML in Messages

2009-12-15 Thread Bob O'Brien
Kai Schaetzl wrote: In-Reply-To: 4b226758.90...@perkel.com Mark, can you *please* stop sending HTML-only messages to the list? Kai All the noise aside, the message referenced by your threading header, /at least when it arrived here/, DID in fact contain a text-part which appears to

Re: emailreg.org - permission to spamassassin masscheck?

2009-12-14 Thread Bob O'Brien
Mike Cardwell wrote: So you don't have to register a domain before you can register your IPs... Which is it? Do I have to register a domain, or don't I? So I signed up for an account and all I see is an option to register my domains with them, and that costs money... I see no option for

Re: [sa] RE: emailreg.org - tainted white list

2009-12-14 Thread Bob O'Brien
Charles Gregory wrote: I ask again, on the issue of whitelists, is there a serious issue with spammers targetting white-listed IP's as favored candidates for hacking? I'm okay with the answer being 'no'. I'm sure people with large servers and good statistics could answer this question. But I

Re: emailreg.org - pretty good white list

2009-12-12 Thread Bob O'Brien
Michael Scheidell wrote: But... you draw your own conclusions. the best thing about a conspiracy theory is that there is little proof. if this is little proof, then this would make a good conspiracy theory. YMMV. I have more evidence for you: Barracuda Networks uses the

Re: Filter question

2009-12-01 Thread Bob O'Brien
Wolfgang Zeikat wrote: Benny Pedersen wrote: postfix reject_unverified_sender does a vrfy Nope. It opens an SMTP connection and waits what the receiving MTA answers to RCPT TO Then it closes the connection. That is not vrfy. Hope this helps, wolfgang The VRFY mechanism

RE: Drivel

2009-09-16 Thread Bob O'Brien
Michael Hutchinson [mailto:mhutchin...@manux.co.nz] wrote: -Original Message- From: Charles Gregory [mailto:cgreg...@hwcn.org] Good users all. Never heard of a troll? Nonsensical. Irritating. Taunting. Best defense against this kind of childish antic is to IGNORE it.

RE: JMF whitelist and RAZOR conflict

2009-09-11 Thread Bob O'Brien
No - that really came out of mail2.kraftfoods.com (parent corporation of Gevalia, remember?) I have seen other samples of the same message spamming other recipients, and there's no question of source IP. Bob -Original Message- From: MySQL Student

RE: Barracuda Blacklist

2009-06-02 Thread Bob O'Brien
[mailto:neil.schwartz...@returnpath.net] Sent: Saturday, May 30, 2009 11:58 AM To: Bob O'Brien; Spamassassin Subject: Re: Barracuda Blacklist On 29/05/09 4:09 PM, Bob O'Brien bobr...@barracuda.com wrote: Neil, Based on our Requests for Removal filed over the past 3+ weeks from ReturnPath, the number

RE: Barracuda Blacklist

2009-06-02 Thread Bob O'Brien
Actually, Richard, yes - I have management approval for what details I choose to share with any given online community. I am also learning to count Jann among my friends, and I'm sure he would *appropriately* acknowledge your greeting. If your participation is at all typical of this

RE: Barracuda Blacklist

2009-05-30 Thread Bob O'Brien
Neil, Based on our Requests for Removal filed over the past 3+ weeks from ReturnPath, the number of IPs that you are claiming to have had issues with appears inflated by a factor of nearly 50%. More importantly, I feel it is irresponsible to oversimplify a cleared listing as a false positive

RE: Barracuda Blacklist

2009-05-28 Thread Bob O'Brien
please redirect this thread back to the original _blacklist_ question? Bob O`Bob O'Brien -Original Message- From: Rob McEwen [mailto:r...@invaluement.com] Sent: Thursday, May 28, 2009 8:10 AM To: users@spamassassin.apache.org Subject: Re: Barracuda Blacklist Karsten