Re: SOT - Fowarding mail to new service, keeping same MX, pitfalls

is already blocking millions of legitimate messages from Google Apps users, hosting providers, and of course O365. Honestly, do you really need to communicate with anyone that clue-free? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: SOT - Fowarding mail to new service, keeping same MX, pitfalls

. That is, from IP's that are not published as >"ours". This is why SPF has "include" syntax. Check with the Microsoft rep for the exact details, but it will probably mean something like adding "include:spf.messaging.microsoft.com include:spf.protection.outlook.com" to your current SPF record. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

What does URIBL_SBL check (was Re: Amazon Route53 nameservers listed in SBL?)

me know whether this is a description bug or something else? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Amazon Route53 nameservers listed in SBL?

-- but that's a separate issue.) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: PatioDeals@recolong.review how to get high score

>Can I configure Spam-assassin to drop > emails with extensions .review? I get a lot of emails with Add to a .cf file blacklist_from *.review And done. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

FSL_MY_NAME_IS scoring 2.9??

$DAYJOB). I've temporarily bumped it down to 0.5 in local.cf, but I'd welcome input from the developers on that one -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Rules for RanDoMCapitALizED URIs?

I see a lot of sam coming in from domains that use a lot of random capitalization in both the domain and TLD portions -- does anybody have a good rule for catching those? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: AWL defeating my SPAM classification

en the dig implementations on MacOS and Ubuntu. Sorry for the noise! -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: AWL defeating my SPAM classification

s way down to the appropriate uribl.com server. In your case your actual IPs will be different, but the pattern should still hold. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: effectiveness of DCC checks?

uot;sometimes wrong, but never uncertain" sounds like a description of your mailing list posts, it¹s worth putting the effort in to change that. It took me 30 seconds of reading to confirm that my understanding of DCC was correct, and another 60 seconds to discover that my understanding of Razor and Pyz

Re: Uptick in spam

>You also may want to look at the Invaluement IP/URI lists. >(Invaluement.com). Detection rate is real good and FP level is >extraordinary. +1. Very happy with invaluement at $DAYJOB. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Bogus day old domains from RRPPROXY.NET

Karving her initials on the m00se with the sharpened end of an interspace t00thbrush given her by Svenge -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: updated RegistrarBoundaries.pm

On 2/21/15 7:31 PM, "Nick Edwards" wrote: >Plenty appreciate your work, dont worry about $INDIVIDUAL, that $EXPLETIVE I'm not a moderator or anything, but this kind of personal attack is neither necessary nor appropriate here, IMO. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Amazon phishing spam

rged bank emails; putting the phish in the junk folder just gives them an easy opportunity to make mistakes. I have Exim set to reject mail on an SA score of 10+ and it's been years since I had a FP score 10+. (I quarantine SA scores of 5.0-9.9 and those average 2-3 FP a week.) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Amazon phishing spam

dmins that's a risk they can't take. For myself, Id rather reject barely-possibly-valid mail from those senders than accept probable-phishing emails claiming to be from those senders; as always YMMV and my advice is worth precisely what you paid for it. ;-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: URLs with non-ASCII chars

On 2/13/15, 4:27 PM, "Dave Wreski" wrote: >I thought I would send this on to you instead of broadcasting it. You thought wrong :-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Amazon phishing spam

any bankofamerica.com address will be blacklisted, but for an authenticated address it's canceled by the whitelisting. (Also, I score blacklist_from at 80 points so an address that's both blacklisted and whitelisted will be effectively whitelisted, thanks to a net -20 score.) --

Re: New type of obfuscation?

G_OBFUSCATION /\&\#959;/ Wouldn't that have to be a rawbody rule? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: ancient perl versions

On 12/4/14 10:27 PM, "Nick Edwards" wrote: >> It's also not wrapping the text at all. > it wraps fine here Look at the last roundcube post, the one sent at 01:06 GMT. The line of quoted text runs 273 columns without a linewrap. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: ancient perl versions

ont-size: 10pt' and this one omitted font-size entirely. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: Honeypot email addresses

er find the fix for that problem $FOO you were having?" since I can't assume they're still subscribed to the list. I may or may not copy the list on that email, though I certainly will if I come up with an answer. http://xkcd.com/979/ reference here> -- Dave Pooser Cat-Herder-in

Re: Honeypot email addresses

be positive that the honeypot did NOT sign up for an email list and then start marking it as spam in lieu of the unsubscribe button. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved

Re: Argument "perl_version" isn't numeric

distro channels to gain version_check capabilities 2) Take the version_check out and break sa-update on computers running older versions of perl 3) Write all spamassassin rules to use the lowest-common-denominator perl, which would be the "crufty version of perl" I referred to above. Do you

Re: Argument "perl_version" isn't numeric

The decision to run spamassassin on a distribution that is constitutionally opposed to modern perl is not the fault of the spamassassin team. The problem is in the system administrator who tries to hammer every use case into the same square hole. It should be fixed there. -- Dave Pooser

Re: Argument "perl_version" isn't numeric

to /dev/null, and write your own monitoring script to tell you if sa-update broke spamd 5) Run SA in some kind of container or VM so you can optimize for spamassassin without tainting the purity of your RHEL install -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the

Re: New spam / phishing rule?

On 11/8/14, 5:57 PM, "Reindl Harald" wrote: >what is that garbage worth for? It's from a book by Terry Pratchett. Are we really so hard up for things to talk about that we're going to have a .sig flamewar now? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com Program

Re: half-OT: please remove spam-markers from subjects

other, including passive-agressive "I'm not speaking to him but would you please tell him he's a big ol' poopy-head" comments? Alternately, may I request a list moderator review the signal:noise ratio associated with this feud and take appropriate action? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: sa-learn from a remote imap folder

ues. Thanks, Ian, for the warning and thanks, Bob, for setting my mind at ease. ;-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: sa-learn from a remote imap folder

ad of NFS4 so I can explicitly state the nolocks option -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly

Re: sa-learn from a remote imap folder

A servers for sa-learn. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shouting

Re: Valid TLDs (was: Re: Custom rule not hitting suddenly?)

>>embedded in the rules. > ^ >Code, not rules. Which basically is the issue here... Just read what I *mean* and not what I type. ;-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving saf

Re: Valid TLDs (was: Re: Custom rule not hitting suddenly?)

'm a vote for the hideously ugly preoptimized blob over adding a new dependency. That said, I'd rather have the new dependency than keep the configuration embedded in the rules. So, in order of preference: 1) Pre-optimized blob 2) Regexp::List dependency 3) Current method -- Dave Pooser

Re: Missing rules

the current-but-about-to-be-outdated 3.4.0, or you can switch to Fedora, or start using CPAN, or But trying to fight spam with a 4.5-year-old version of SpamAssassin is as likely to succeed as using a 4.5 year old set of virus definitions for your virus filtering. -- Dave Pooser Cat-Herder-i

Re: RBL effectiveness (was Re: Ready to throw in the towel on email providing...)

? To take up arms against a sea of troubles) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn

Re: Ready to throw in the towel on email providing...

27;m pretty sure I'm not getting a discount or anything for this.) :-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, th

Re: Obfuscated Windows excecutables (was Re: Ideas sought for blocking new variant of cryptolocker)

we would be living in a much nicer world than the one we currently inhabit. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside,

Re: Consecutive Newlines in Rawbody Rules

On 6/17/14 3:31 PM, "Kevin A. McGrail" wrote: >On 6/17/2014 4:22 PM, Dave Pooser wrote: >> Did any decision on this get reached? >> >Yes, I believe it was committed to trunk and considered resolved. Presumably that will be released in 3.4.1 -- is there a target dat

Re: Consecutive Newlines in Rawbody Rules (was: Re: Bayes refinement)

t particular flavor of spam that I'm considering making David's modifications locally to Message.pm -- but obviously I'd prefer to leave the core modules unmolested if there's an "official" fix in the works. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com &q

Re: sa-update NOT updating.

ntribute hardware and/or VM space at $WORKPLACE for an offsite replica as long as we wouldn't need to sync more than 2-4GB/day after the initial setup completed. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

RCVD_IN_IADB_VOUCHED pushed spam into false negatives

ble default for stock SA? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, a

Re: CentOS/RHEL repo?

ac OS X? For Solaris/Illumos?) As far as I'm concerned, the proper role for the project in binary distribution is the same as it has been-- when other sources create the packages, the SA project provides links (and disclaims support). Anything beyond that is suboptimal allocation of an a

Re: BAYES_999 strange behavior

he next couple of rule updates. Can we get a posting to this list when that rule update happens? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish

Re: BAYES_999 strange behavior

to whinge. The bright side is it's given me an impetus to redesign my meta rules with an abstraction layer in between stock rules and my meta rules so I'll be better positioned to take advantage of new rules in future. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is n

Re: BAYES_999 strange behavior

O_BAYES_VBD DP_FRM_INFO && (BAYES_99 || BAYES_999) under normal conditions? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside,

Re: BAYES_999 strange behavior

y, but I'd rather tinker with that sometime when $DAYJOB is not requiring 12-hour days from me -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across t

3.4 predicted release date?

s not currently in use. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking oil, and shoutin

Re: Exclude from RCVD_IN_DNSWL_MED

their Received: headers." Adding the messagelabs servers to trusted_networks means 1) don't check the messagelabs server IPs against blacklists or whitelists and 2) do check the hop before messagelabs against blacklists and whitelists. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com &

Rule to catch similar localparts in "To:" recipients?

One thing I've noticed more of recently is spam sent to multiple recipients at multiple domains with the same or similar local parts; one message might go to and and and so on. Is there a rule or plugin that helps flag that sort of message? -- Dave Pooser Cat-Herder-in-Chief, Pooservill

Re: sa-update / perl error again

lot of other Linux (and other UNIX) distros out there. (I personally have an irrational affection for OpenIndiana -- all the crunchy goodness of Solaris without the Ellison tax-- but Ubuntu or Fedora might be better options if you're primarily familiar with Linux.) -- Dave Pooser Cat-Herder-in-C

Re: Adding a blacklist via sa-update - would you mind?

>I'm not very familiar with sa-update, but perhaps it should have >seperate channels similar to Debian's "stable" and "testing" releases. >A new DNSBL (IMO) would definitely be a "testing" release. End-users >could then subscribe to whiche

Re: Need Volunteers for Ham Trap

se tagged email addresses for different airlines, and it would be trivial for me to have my server relay those messages to a hamtrap address as well as delivering to my personal email if that sort of thing would be useful. -- Dave Pooser Cat-Herder-in-Chief Pooserville.com

Re: IPv6 DNSBL/WL design, was Fwd: [Asrg] draft-levine-iprangepub-01

tting > "political" about who gets SMTP-designation. Frankly, I'd think that besides costing the spammers money (a good thing in and of itself) it would also be a pretty good spamsign if a block has more than, say, 5 or so registered senders in a /64. Just thinking out lo

Re: IPv6 DNSBL/WL design, was Fwd: [Asrg] draft-levine-iprangepub-01

ced as infrequently as once or twice a day. I mean, as a practical matter your MX records aren't going to propagate through DNS much faster than that anyway. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely

Re: How not to implement SPF (nationwide.co.uk)

t the FUSS, not the ultimate hat-checker. Just a way that I can make sure legitimate mails from $sender get through while forged messages pretending to be from $sender don't. This ain't rocket surgery. -- Dave Pooser Cat-Herder-in-Chief Pooserville.com

Re: Set for Whitelist Only?

O_ABUSED80.0 Messages from whitelisted users will start with a score of -20; messages from other users will start with a score of 80. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-pr

Re: Spamassasin as a gateway filter for Exchange

ses. That's a very bad idea-- legitimate senders will sometimes mistype addresses, and having their messages disappear into a black hole with no notice to the sender is... suboptimal. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the in

Re: Bogus mails from hijacked accounts

hasn't left Texas, let alone the US, in the past few years-- and used a number of phrases that a native speaker of American so-called-English wouldn't. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely

Re: Off Topic - SPF - What a Disaster

elist_auth is worth its weight in platinum -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finish line broadside, thoroughly used up, worn out, leaking

Re: painting everybody in Taiwan with the same brush

isn't at fault for its condition, but I'm not gonna get close enough for it to bite me. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the fini

Re: Dear Santa

me I'd "known" him he'd been living with a diagnosis of terminal cancer (they gave him six months-- he held on four years); through chemo and all the other sufferings he'd stayed energetically involved in fighting spam and helping others learn to do so. Talk about sliding acr

Re: Dear Santa

ght it be possible to share the code so that some of us could auto-generate rules based on our own ham/spam mailstreams, and then share those rules with you for possible SOUGHT inclusion? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the inten

Re: OT: Museum piece...

; faster and 100x more friendly for the tech directors to use than the $20k GVG > package was. Heh. And today at $DAYJOB we're using $2200 worth of Playback Pro software + iMac because it's 4x faster and 100x more friendly than the $10k GV Turbo. The more things change :-)

Re: emailreg.org - pretty good white list

OB. But as it is, it feels like paying the large Italian guy who comes around and says "Nice mail server ya gots here-- be a shame if something wuz to HAPPEN to it" -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of a

Re: Constant Contact

er 99% of the mail received from CC at $ORKPLACE is requested by my users. No complaints here. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "And the beer I had for breakfast Wasn't bad, so I had one more for dessert."

Re: Independence Day - Barracuda SA Rules & White List

te 4 July as Ungratefulness Day. I assume you gave the holiday a different name to clarify for those of us on the wrong side of the pond?) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-pres

Re: Boxtrapper and Spamassassin Cpanel 11 strange behaviour.

tion link just to make sure the backscatterer gets the spam. I figure if he wants me to filter his spam for free, he'll get every bit of his money's worth. ;-) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "If you think bringing a wet noodle to an Amish rake fight makes you &#

Re: Spam Assassin White List

> Is there a blacklist_noauth? Because it seems that would be far more > useful for paypal. > > blacklist_auth *paypal* You whitelist_auth paypal.com and then a rule that scores +50 for From contains *...@paypal.com -- quick and easy. -- Dave Pooser Cat-Herder-in-Chief, Pooservill

Re: Spam Assassin White List

safer in a world where spammers forge "From:" addresses constantly. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "You're useless when you're high on catnip, you know that?"

Re: Suddenly bouncing emails

OMAIN results. Best practice is to run a DNS instance on your mail server for its exclusive use to avoid that sort of problem. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "You know a nice little side benefit of watching women's sports? Sitting in front of the TV for a while w

Re: Bye Bye Bayes

> I used to have a couple of users who treated their Trash folder as > long-term read-message storage. I have a user like that at $DAYJOB. I used to ask him if he kept his car title and other important documents in the wastebasket under his desk at home. -- Dave Pooser Cat-Herder-in

Re: Spam hitting Bayes_99?

s-- or even accurately-flagged spam-- into that folder for learning. You can do the same thing with ham, too. I have my server regularly learn as ham a couple of users' inboxes to make sure Bayes has a good ham corpus to work with. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is

Re: Temporary 'Replacements' for SaneSecurity

> None of my friends are on > services that are that poorly configured No friends on Verizon? Their @#$% mail servers are 70% of my FPs. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pret

Preemptive URI blocklisting

he "I told you so" effect when my rejected submission joins their blacklist a couple of weeks later) -- but I think the real win would come in creating a URI specifically for preemptively listing these snowshoe domains. Anybody else think this could be useful? -- Dave Pooser Cat-Herde

Re: Re[2]: filter for russian porno message?

> Thanks. > Sorry,but I'm new in spamassassin users.Can you say where I must write > this rules? > Thanks again. Be very careful with that rule-- it would hit on all Russian-language email, which considering your geographic location might be unwise. -- Dave Pooser Ca

Re: New free blacklist: BRBL - Barracuda Reputation Block List

nt to check rDNS on, not the workstation that submitted the original message somewhere in the bowels of an RFC1918 network. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved pi

Re: Dramatic increase in bounce messages to forged addresses

s do try to avoid using forged addresses from domains that publish DKIM/SPF records; that's a simple check they can run to increase the chance of their spew hitting inboxes instead of /dev/null. -- Dave Pooser Cat-Herder-in-Chief,Pooserville.com "Jon, the CIA's credibility has never be

Re: Howto stop SPF_FAIL from internal network?

> An SPF_PASS is pretty worthless But awfully handy for whitelist_from_spf. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: the opposit of "ok_locales" ??

s. Then he shouldn't be tweaking SpamAssassin conf files, or most other server settings. The world has enough Mouse Clicking System Engineers. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and

Re: newbie question: scan msgs smaller than certain size

Reject spam scoring 10+ deny message = Message blocked by our spam filter.\nEmail <[EMAIL PROTECTED]> with questions. condition = ${if <{$message_size}{100K}{true}{false}} spam = nobody:true condition = ${if >{$spam_score_int}{99}{1}{0}} --

Re: New domains (was: URIWhois plugin)

ical matter we'd be talking about a multi-gigabyte zone file and I expect that would prove a little problematic for whatever sucker^H^H^H kind soul ended up hosting the thing. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intentio

Re: sender name same as recipient name

rk tests? Assuming your timestamps are accurate all of these should have hit on one or more URIBL rules. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across th

Re: FPs for SUBJECT_FUZZY_MEDS

r the score or create a meta rule that checks for Medzinarodny and if it is present and SUBJECT_FUZZY_MEDS hits adds a negative score equal to the SUBJECT_FUZZY_MEDS score. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "The one thing I never want to see again is a military parade." --Ulysses S. Grant

Re: Posioned MX is a bad idea [Was: Email forwarding and RBL trouble]

> On Sat, 25 Aug 2007, Dave Pooser wrote: >> >> So do you run your servers with VRFY enabled? > > Yes. If you are verifying addresses at RCPT time, which you must to avoid > spam blowback, then there's no point disabling VRFY. Except that I can verify addresses af

Re: Posioned MX is a bad idea [Was: Email forwarding and RBL trouble]

> If > someone is sending email using one of my domains I want people verifying > the sender addresses. So do you run your servers with VRFY enabled? -- Dave Pooser Cat-Herder-in-Chief Pooserville.com "Jon, the CIA's credibility has never been lower. Crazy people no longer

Re: Bouncing emails from certain countries

oles.us to block based on sender countries. Lying about why the message was rejected is going to be something you have to do in your MTA, and I'd consider it an extremely bad idea because it's going to make troubleshooting difficult. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "

Re: How do I temporarily disable SpamAssassin?

with qmail I'm no help to you here. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "Jon, the CIA's credibility has never been lower. Crazy people no longer believe the CIA is implanting a chip in their heads to listen to their dreams. They just don't think they can pul

Re: How do I temporarily disable SpamAssassin?

t the commands aren't found? They're right there in the > directory? Root typically uses a fixed PATH that doesn't include the current directory (for security reasons). Try giving it an explicit path: ./clamav-clamd.sh stop or /usr/local/etc/rc.d/clamav-clamd.sh stop and that

Re: fdf spam

ied 2007-07-27, and you have to actually read the .pm to see that it's now at 0.8. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "NASCAR is a Yankee conspiracy to keep you all placated so the South won't rise again." --QuestionableContent.net

Re: Now its zip attachments ^^

le who are responsible for our getting paid it seems worthwhile to deliver what they expect instead of getting hung up on the purpose of email as defined in 1970-whatever. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving sa

Re: New PDF?

> Current version is v0.6. And sigs for those were added last > Thursday... The web page at <http://www.rulesemporium.com/plugins.htm> still identifies it as 0.4 with a mod date 0f July 16, FYI. The linked file is 0.6, though. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

Re: not everyone is happy with SA

than clicking "delete" requires from the recipient, we just won the spam war anyway. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the intention of arriving safely in one pretty and well-preserved piece, but to slide across the finis

Re: not everyone is happy with SA

hat included a link to a website where the sender could release the spam from quarantine. So no backscatter spamming innocent third parties, but you still get a chance for the sender to verify sending a message. The backend might be a little involved to set up, but the final system looked secure and

Re: not everyone is happy with SA

for. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "Every bad turn I've made, you've been at the helm, sowing chaos and stupidity through the landscape of my days like some sort of retarded Johnny Appleseed." -- Goats 8-31-2005

Re: Need a rule written - Can whitelisting be this easy?

message posted before you commented on it, especially since it seems to complement your own idea quite nicely? -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "I've *met* humanity. I worked retail." --Diesel Sweeties

Re: How To Kill Spam Dead?

and not to the (probably forged) return-address. No backscatter, no joejob potential. The only problem I see is that some MTAs may "clean up" the message until it's unrecognizable. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grave with the

Re: False positives: [SPF failed: ]

> This looks familiar... as in I think I've fixed this before familiar. > What version of SA are you using? SA 3.1.5, Perl 5.8.6, on Mac OS X Some more reading found that [SPF failed: ] is a normal result for an SPF timeout, so I set spf_timeout 30 and will see if that helps any. --

False positives: [SPF failed: ]

-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% [score: 0.] 1.8 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.5 MY_CID_AND_ARIAL2 SARE CID and Arial2

Re: R: R: Inappropriate use of E-Mail addresses

giner catchall account (took me 6 years and a new boss to finally put a bullet in it) we've seen MANY fewer joejobs. Don't know whether there's causation or just correlation, but either way it makes me a happy man. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "We owed t

Alternative to red.uribl.com?

ulling the information from whois during mail processing? (Although that would be resource-intensive and would probably run afoul of their prohibition on high-volume querying, so that's probably a lose.) -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com "...Life is not a journey to the grav

Re: how is spamd launched on Mac OS X Server 10.3.9?

> I can't find a spamd.sh anywhere... SA is not included by default until 10.4. If you installed it yourself, you may need to create a StartupItem in /Library/StartupItems. Otherwise, check the documentation from the installed package. -- Dave Pooser Cat-Herder-in-Chief, Pooserville.com

  1   2   >