Re: blacklisting a forger

2009-09-06 Thread Magnus Holmgren
and test it against some RBLs? -- Magnus Holmgrenholmg...@lysator.liu.se (No Cc of list mail needed, thanks) signature.asc Description: This is a digitally signed message part.

Re: trust SMTP authenticated users

2009-05-10 Thread Magnus Holmgren
but not in internal_networks, receive the users' mail, or arrange for a fake Received line, simulating this, to be inserted. -- Magnus Holmgrenholmg...@lysator.liu.se (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better

Re: SUBJ_ALL_CAPS anti-Asian (KS - SWC Œ‹‰Ê)

2009-05-09 Thread Magnus Holmgren
-bit text. See RFC 2047. -- Magnus Holmgrenholmg...@lysator.liu.se (No Cc of list mail needed, thanks) signature.asc Description: This is a digitally signed message part.

Re: Spam from windows live

2009-05-03 Thread Magnus Holmgren
for BAYES_50 is basically equivalent to lowering the threshold, which is usually not recommended. -- Magnus Holmgrenholmg...@lysator.liu.se (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point

Re: Detecting the Registrar of the sending host?

2008-07-05 Thread Magnus Holmgren
from domains registered with some registrars are less likely to emit spam than others. And I really love the way you completely ignored my example of gmail.com Exceptions are possible to handle. After all, SpamAssassin is all about combining and adding many various rules. -- Magnus

Re: Howto stop SPF_FAIL from internal network?

2008-03-21 Thread Magnus Holmgren
external server that handled the mail, and the server you want to check in the case of list mail is not the list server but the server that delivered the mail to the list server. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better

Re: Confusing issue regarding SPF_FAIL and local delivery

2007-09-23 Thread Magnus Holmgren
. He also wrote And mostly, they will not tamper with email headers, that's what the trust is about., but you left that out. And hosts in trusted_networks *are* (mildly) trusted not to originate spam. That's what ALL_TRUSTED is about. -- Magnus Holmgren[EMAIL PROTECTED

Re: bayes_seen = 256GB

2007-09-23 Thread Magnus Holmgren
explicitly overridden (for example when populating a clean bayes DB with an initial corpus). -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgp6jhYlXZsPa.pgp Description: PGP signature

Re: SPF-Compliant Spam

2007-08-28 Thread Magnus Holmgren
is not going to work. It's the same thing as demanding that the envelope sender always be trusted by everybody, but we know that it can't be. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas

Re: SPF-Compliant Spam

2007-08-27 Thread Magnus Holmgren
for that. Another approach is to add a few points for newly-registered domains, so called day-old bread. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point

Re: SPF-Compliant Spam

2007-08-27 Thread Magnus Holmgren
senders may originate from. It's their job to know if the recipient forwards mail from the connecting host. It can be tricky, but it's not impossible in principle. Applying SPF without thinking is incompetent and will cause false positives. -- Magnus Holmgren[EMAIL PROTECTED

Re: SPF-Compliant Spam

2007-08-27 Thread Magnus Holmgren
On Monday 27 August 2007 21:54, Marc Perkel wrote: Magnus Holmgren wrote: SPF does not in itself break email forwarding. SPF tells MTAs where mail with certain senders may originate from. It's their job to know if the recipient forwards mail from the connecting host. It can be tricky

Re: MS outlook can't read parsed email... HELP!!

2007-08-13 Thread Magnus Holmgren
On Monday 13 August 2007 07:12, Nigel Frankcom wrote: [20:35] !JamesDR man, who ever wrote this ExchangeSpamC NEVER use option explicit, therefore almost all of his vars (that he didn't copy/paste from) weren't dimensioned Sounds like Visual Basic... ;-P -- Magnus Holmgren[EMAIL

Re: Huge server load problem with Exim and SpamAssassin

2007-08-02 Thread Magnus Holmgren
server detected your message as spam and has prevented delivery. :super: -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack

Re: BAYES_99 and ham

2007-07-26 Thread Magnus Holmgren
eval:check_bayes('0.999', '1.00') describe BAYES_99 Bayesian spam probability is 99 to 99.9% describe BAYES_999 Bayesian spam probability is 99.9 to 100% score BAYES_99 6.5 score BAYES_999 8 (with spam threshold at 5.0 and reject threshold (in SA-Exim) at 7.5). -- Magnus Holmgren

Re: How do you stop others from sending emails from your email addresses ?

2007-07-25 Thread Magnus Holmgren
. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack) -- Dave Evans pgpYxXKPtfBzM.pgp Description: PGP signature

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread Magnus Holmgren
to do same thing for high scoring spam. Sounds interesting. Talk of a mod? It's been a standard feature for ages now. For even longer with SA-Exim. -- Magnus Holmgren

Re: SA-Exim - not scanning local nets.

2007-05-24 Thread Magnus Holmgren
to join the SA-Exim mailing list, [EMAIL PROTECTED] See http://lists.merlins.org/lists/listinfo/sa-exim -- Magnus Holmgren[EMAIL PROTECTED] (Debian sa-exim(No Cc of list mail needed, thanks) maintainer) pgpqqA0L2hFvq.pgp Description: PGP signature

Re: spam forwarding

2007-05-21 Thread Magnus Holmgren
the configuration of Exim or procmail or whatever you use. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpXTek3H9crw.pgp Description: PGP signature

Re: spam forwarding

2007-05-20 Thread Magnus Holmgren
depending on exactly how you've set up your system. Please ask on [EMAIL PROTECTED] and provide more details on your configuration. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail

Re: spamassassin upgrade

2007-05-20 Thread Magnus Holmgren
apt-get and has a UI. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpYyMA6LukKC.pgp Description: PGP signature

Re: ANNOUNCE: Apache SpamAssassin 3.2.0 available

2007-05-12 Thread Magnus Holmgren
: http://spamassassin.apache.org/downloads.cgi?update=200705021400 Any projection when SA-3.2 will be in the FBSD ports? Sent email to [EMAIL PROTECTED], but bounced back. I'm wondering when there will be a new Debian version. Duncan and Jesus, do you need help? -- Magnus Holmgren

Re: Per User

2007-05-03 Thread Magnus Holmgren
from it? Perhaps you know all that and are merely looking for this specific option: allow_user_rules. It has to be set to 1 to allow user rules. That's strongly discouraged though. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks

Re: SUBJECT_ENCODED_TWICE really wrong?

2007-04-25 Thread Magnus Holmgren
. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack) -- Dave Evans pgpMSCVvY59oA.pgp Description: PGP signature

Re: Newsletter gets declared as spam

2007-04-24 Thread Magnus Holmgren
spam. Apparently there hasn't been enough ham matching it in the corpora fed to the mass-checks. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpdRwUcGfcqR.pgp Description: PGP signature

Re: How to use SpamAssassin from PHP?

2007-04-17 Thread Magnus Holmgren
a separate bayes DB, is recommended. It shouldn't have to be a completely separate _installation_ though. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgp2HjDr92zQU.pgp Description: PGP signature

Re: domainkey

2007-04-16 Thread Magnus Holmgren
/SpamAssassin/Plugin/DKIM.pm line 60. [EMAIL PROTECTED] ~]# rpm -q perl-Mail-DomainKeys perl-Mail-DomainKeys-1.0 What other package do i need? perl-Mail-DKIM-something. DKIM != DomainKeys. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks

Re: spamc and Mail::SpamAssassin::Client don't return same result

2007-04-16 Thread Magnus Holmgren
header and body -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpwbU755cWGP.pgp Description: PGP signature

Re: Messages receiving High Score but still getting through

2007-04-04 Thread Magnus Holmgren
it). Have you read README.spamd? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack) -- Dave Evans pgpnIowAnIhNj.pgp

Re: Tool for validating sender address as spam-fighting technique?

2007-04-03 Thread Magnus Holmgren
to enforce SPF, they have to allow U to tell them about this forwarding, so that an exception can be made. A relatively secure and not too user-unfriendly way of doing this could be with special addresses on this form: user+forwarded-(secret)@domain.example. -- Magnus Holmgren[EMAIL PROTECTED

Re: Things I would change to stop spam

2007-03-30 Thread Magnus Holmgren
that it won't accomplish anything that can't already be accomplished. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpipCg5SeUTi.pgp Description: PGP signature

Re: Sender Address Verification is NOT abouse and very effective

2007-03-30 Thread Magnus Holmgren
to policy.) -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpEPwDRWBqFq.pgp Description: PGP signature

Re: spamc/spamd bayes learning question

2007-03-26 Thread Magnus Holmgren
to do that. It's common to put || true at the end of a command you don't care about the exit status of. Or you could just exit 0. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better

Re: spamassassin 3.1.8 fine tuning

2007-03-19 Thread Magnus Holmgren
results? TIA, Use rules_du_jour. This will download cf files from rulesemporium No, use sa-update instead. It can download cf files from rulesemporium as well as the official rule updates. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks

Re: Training SA-Migrating from old IMAP to new IMAP server

2007-03-12 Thread Magnus Holmgren
have any to feed to to the new system. Will that be a problem? Having too great an imbalance in numbers between ham and spam will bias the bayes classifier towards everything is spam or in this case everything is ham. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc

Re: 0 padding the _SCORE_

2007-03-12 Thread Magnus Holmgren
of one character? This particular account does not auto delete any mail, regardless of score (hey, not my idea, m'kay?) Yes; see the Mail::SpamAssassin::Conf(3pm) manpage, section Template tags. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks

Re: Odd score

2007-02-20 Thread Magnus Holmgren
. It doesn't have to be From:, it can be Return-Path: or Envelope-Sender: among others. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus

Re: Spam not getting scanned

2007-02-16 Thread Magnus Holmgren
it, I'm guessing it's Postfix. SpamAssassin always processes all mail it gets and at the very least adds an X-Spam-Checker-Version: line to the mail header, so you're guessing correctly. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks

Re: quick question

2007-02-14 Thread Magnus Holmgren
score than this? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack) -- Dave Evans pgpjwNWPfGir2.pgp Description: PGP

Re: MTA Search: Non contiguous ranges?

2007-02-13 Thread Magnus Holmgren
at. 5) Good logging system I think so, but I can't guarantee that there is no MTA with better logging facilities. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better

Re: sa-update gives error message Insecure dependency in open while running with -T switch

2007-02-08 Thread Magnus Holmgren
will not install it, how do I upgrade it properly? You have to wait for Etch to be released or add a suitable repository specification to /etc/apt/sources.list, for example one from backports.org. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed

Re: Difference between debian package and cpan-installation

2007-02-07 Thread Magnus Holmgren
), and does some other minor documentation changes. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack) -- Dave Evans

Re: can you trust the MX?

2007-01-29 Thread Magnus Holmgren
deliverer of mail from that domain (if it delivers any outbound mail at all). Would a whitelist_from_mx option perhaps be worthwile? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better

Re: Should I use greylisting

2007-01-25 Thread Magnus Holmgren
to greylist based on blocklists? Judging from his presence on the Exim-related mailing lists he is probably using the Exim MTA and its ACL facilities. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas

Re: bayes 101

2007-01-21 Thread Magnus Holmgren
to change the code such that bayes_path can optionally name a directory? Either by including a trailing slash or by there actually being a directory with the name in question. In these cases the files would simply be called toks, seen, and journal, without a prefix. -- Magnus Holmgren[EMAIL

Re: AWL question

2007-01-17 Thread Magnus Holmgren
locally (not with SMTP), over IPv6 or that the IP address couldn't be extracted for some other reason. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus

Re: Sync bayes between multiple servers.

2007-01-02 Thread Magnus Holmgren
recommended storing bayes data in a database. Perhaps you can manage with a single database server; otherwise you can use whatever replication methods offered by the database engine of your choice. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks

Re: Making use of other spam checkers

2007-01-02 Thread Magnus Holmgren
classification. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack) -- Dave Evans pgpKbQMns1Qif.pgp Description: PGP signature

Re: localhost bypass?

2007-01-01 Thread Magnus Holmgren
Yes, it correctly identified that the mail only travelled through trusted hosts. It also didn't query for those hosts (127.0.0.1 - I don't think it would have anyway, but it doesn't matter). That's about all it means to be trusted by SA. -- Magnus Holmgren[EMAIL PROTECTED

Re: what does Image is single non-interlaced mean ?

2006-12-21 Thread Magnus Holmgren
level. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack) -- Dave Evans pgpGXWuPxOHBe.pgp Description: PGP signature

Re: starting spamd

2006-12-16 Thread Magnus Holmgren
to an absolute minimum. Under no circumstance treat root as a normal user among the rest! -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your

Re: SPF is hopelessly broken and must die!

2006-12-14 Thread Magnus Holmgren
means to me: Look, I - the postmaster - I'm aware of SPF, but unfortunately my customers have the need to send their mail through many ISPs. No, you say ?all. That means that users may send mail from anywhere, but then we don't guarantee that it's genuine. -- Magnus Holmgren[EMAIL

Re: SPF is hopelessly broken and must die!

2006-12-14 Thread Magnus Holmgren
like 20 years ago. That is what is really broken. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack) -- Dave Evans

Re: Problem Adding the X-Spam-Status: header

2006-11-27 Thread Magnus Holmgren
the SA-Exim add-on. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgp70FU1iXs9h.pgp Description: PGP signature

Re: Problem Adding the X-Spam-Status: header

2006-11-27 Thread Magnus Holmgren
On Tuesday 28 November 2006 00:22, Chris Purves wrote: Magnus Holmgren wrote: On Monday 27 November 2006 16:27, Odhiambo Washington wrote: You seem to be running Exim with Exiscan. The add_header options in local.cf are of no consequence - everything is controlled from the ACL

Re: Bayes - Autoexpiry, bayes_seen, and bayes_tok

2006-11-26 Thread Magnus Holmgren
database here. The above means that you have 72 tokens from 1 ham mail and no spam. 1106663054 is a unix timestamp meaning Tue, 25 Jan 2005 14:24:14 UTC. su to the right user or use --dbpath (it works like bayes_path in local.cf). -- Magnus Holmgren[EMAIL PROTECTED

Re: BayesStore/SQL.pm

2006-11-26 Thread Magnus Holmgren
On Sunday 26 November 2006 14:27, Giampaolo Tomassoni wrote: No answer to this? Is this the wrong list to ask code details? You could try [EMAIL PROTECTED] -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpOPo1eUouFh.pgp Description

Re: spamd crashing...

2006-11-26 Thread Magnus Holmgren
with? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpPopryspRGE.pgp Description: PGP signature

Re: Why won't imageinfo.pm work with SA 3.17? - access

2006-11-26 Thread Magnus Holmgren
object method new via package Mail::SpamAssassin::Plugin::ImageInfo at (eval 81) line 1. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpV4Z9vE6o1l.pgp Description: PGP signature

Re: Problems running Spam Assassin

2006-11-21 Thread Magnus Holmgren
for security considerations if you have any untrusted users with shell access. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpdCeXbvJVW8.pgp Description: PGP signature

Re: SPF and SMTP AUTH

2006-11-21 Thread Magnus Holmgren
. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgp9ffanUpFd5.pgp Description: PGP signature

Re: Thoughts on using DCC

2006-11-17 Thread Magnus Holmgren
On Friday 17 November 2006 02:44, Chris wrote: On Thursday 16 November 2006 9:21 am, Magnus Holmgren wrote: So basically you're right and I haven't added anything. What I can add is that I don't use DCC myself, for precisely the aforementioned reason, i.e. that it requires to much fiddling

Re: Hi !

2006-11-17 Thread Magnus Holmgren
in one of two modes, and in the fast mode it adds its own headers, just like Amavis. See http://qmail-scanner.sourceforge.net/FAQ.php#cs, points 16 and 17. Also lower the required_score to something more normal. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail

Re: Thoughts on using DCC

2006-11-16 Thread Magnus Holmgren
, for precisely the aforementioned reason, i.e. that it requires to much fiddling with mailing lists. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpXF7edCj7oc.pgp Description: PGP signature

Re: Bayesian scores

2006-11-09 Thread Magnus Holmgren
BAYES_00 or the occasional BAYES_05, then in principle there is nothing wrong with a relatively high BAYES_50 score (1.0, for example). -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpngTvZSV9rs.pgp Description: PGP signature

Re: Log Mail Caught As Spam

2006-11-06 Thread Magnus Holmgren
. A better approach however would be to skip running those messages through SA at all, or to whitelist the sender address (read about whitelist_from_rcvd in Mail::SpamAssassin::Conf(3pm) manual page. Also, is the server in trusted_networks? -- Magnus Holmgren[EMAIL PROTECTED

Re: rewrite subject?

2006-11-01 Thread Magnus Holmgren
, NIGERIAN_BODY1, RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_SORBS_WEB, RISK_FREE, TO_EMPTY, URG_BIZ, US_DOLLARS_3 X-Spam-Level: ** X-Spam-Flag: YES -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgp9XihfSsD4F.pgp Description: PGP signature

Re: problems with redirected mail

2006-10-30 Thread Magnus Holmgren
if the systems don't exchange information. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgptcwaxCvv4l.pgp Description: PGP signature

Re: problems with redirected mail

2006-10-30 Thread Magnus Holmgren
to be better) classifying isn't used at all, or isn't trained (they're using Amavisd-new as the interface to SA, which (in a way) explains the slightly different header format. In any case, you won't get the same results unless both servers share the same bayes database. -- Magnus Holmgren

Re: OT/Humor: Do I have to live in fear of spammers?

2006-10-25 Thread Magnus Holmgren
On Wednesday 25 October 2006 10:44, Chr. v. Stuckrad took the opportunity to say: Does somebody have a list for something like 'the best random-generated spam/text' without polluting this list ? Perhaps not random, but there's always http://spamusement.com/ -- Magnus Holmgren[EMAIL

Re: I'm thinking about suing Microsoft

2006-10-25 Thread Magnus Holmgren
. Reminds me of the old line about computer security The only way to completely secure a computer is to unplug it :p The ultimate windows security accessory, A pair of scissors to cut the power cable :D http://www.ranum.com/security/computer_security/papers/a1-firewall/ -- Magnus Holmgren

BUG: Re: Does re-learning really work?

2006-10-24 Thread Magnus Holmgren
On Sunday 15 October 2006 20:49, Magnus Holmgren took the opportunity to say: Apparently, when sa-learn reads a message from stdin, for some reason the entire header, and possibly even the empty line separating it from the body, disappears. Or at least $msg-get_header(Date) and $msg-get_header

Re: I'm thinking about suing Microsoft

2006-10-23 Thread Magnus Holmgren
computer with Windows XP I used recently was that unauthorised installations only get critical updates, but they do get those. Is that going to change with Vista? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpbYCVWuY4zj.pgp

Re: I'm thinking about suing Microsoft

2006-10-23 Thread Magnus Holmgren
On Monday 23 October 2006 21:58, Peter H. Lemieux took the opportunity to say: Magnus Holmgren wrote: I thought they did? At least the message from WU/WGA on one computer with Windows XP I used recently was that unauthorised installations only get critical updates, but they do get those

Re: ALL_TRUSTED creating a problem

2006-10-20 Thread Magnus Holmgren
(if the server has crappy spam protection and the MLM doesn't probe before unsubscribing). -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpuOkAgVXood.pgp Description: PGP signature

Re: What's with UCEPROTECT List?

2006-10-19 Thread Magnus Holmgren
On Thursday 19 October 2006 06:39, Jo Rhett took the opportunity to say: Magnus Holmgren wrote: OK, the attacker might have 100 zombies on different ISPs, with each ISP's smarthost helping amplify the attack a bit. But does that really count? The servers making the callouts aren't the ones

Re: ALL_TRUSTED creating a problem

2006-10-19 Thread Magnus Holmgren
with ESMTP id 1234-567-9 and my.domain.example resolves to a local interface address? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpaCho6tTXbb.pgp Description: PGP signature

Re: What's with UCEPROTECT List?

2006-10-18 Thread Magnus Holmgren
cause a DoS against the guy who lended his address, at no additional cost, especially if the callouts are done too early. (Then there is SPF...) -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpMdvQnWWvxg.pgp Description: PGP signature

Re: mails without headers

2006-10-18 Thread Magnus Holmgren
? That is possible, yes. It can also be that the messages are too big (over 250 kB, usually). But again it depends on how SA is called. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpC1KipZDBD1.pgp Description: PGP signature

Re: mails without headers

2006-10-18 Thread Magnus Holmgren
the mail through spamd, but instead just gives it to spamd, gets the score back and adds its own headers. Have you checked the log files (typically /var/log/mail.log)? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpIAQOP3Jhe6.pgp

Re: whitelist the sa list from learning?

2006-10-18 Thread Magnus Holmgren
for this list: bayes_ignore_to users@spamassassin.apache.org bayes_ignore_to spamassassin-users@incubator.apache.org bayes_ignore_from [EMAIL PROTECTED] Too bad it not only turns off autolearning, but also bayes scoring. Or maybe it isn't that bad? -- Magnus Holmgren[EMAIL PROTECTED

Re: What's with UCEPROTECT List?

2006-10-18 Thread Magnus Holmgren
On Wednesday 18 October 2006 19:41, Jo Rhett took the opportunity to say: Magnus Holmgren wrote: The thing with e.g. the DNS-based DDoS attacks that became common a while ago is that there is a considerable bandwidth amplification; you send a small query packet with a forged sender address

Re: False positive with FUZZY_PLEASE on this e-mail

2006-10-16 Thread Magnus Holmgren
would anyone want to obfuscate the word please anyway? Except in certain phrases, maybe. Perhaps some general rules should be made specific to English mail? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpSovT3LDCxW.pgp Description: PGP

Re: ALL_TRUSTED creating a problem

2006-10-16 Thread Magnus Holmgren
/spamassassin/FixingAllTrusted and http://wiki.apache.org/spamassassin/TrustPath. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgp229eMXdVYH.pgp Description: PGP signature

Does re-learning really work?

2006-10-15 Thread Magnus Holmgren
reading the source, get_msg() in Mail::SpamAssassin::Bayes is used in both cases. So why does it make up different IDs? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpXUlYVd2XFV.pgp Description: PGP signature

Re: Does re-learning really work?

2006-10-15 Thread Magnus Holmgren
On Sunday 15 October 2006 16:55, Magnus Holmgren took the opportunity to say: Indeed, when I did spamassassin -D bayes testmessage the debug output reported learning from a different @sa_generated message ID than sa-learn -D bayes --forget said it was trying to forget (but didn't find

Re: Does re-learning really work?

2006-10-15 Thread Magnus Holmgren
On Sunday 15 October 2006 21:38, jdow took the opportunity to say: From: Magnus Holmgren [EMAIL PROTECTED] On Sunday 15 October 2006 16:55, Magnus Holmgren took the opportunity to say: Indeed, when I did spamassassin -D bayes testmessage the debug output reported learning from a different

Re: Are others getting triple copies of all posts to [EMAIL PROTECTED]

2006-10-09 Thread Magnus Holmgren
Header only and three of Christopher Martin's Careful with that regex! Ha! I got *six* copies of one mail, and four of another. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpShuFJtOtcx.pgp Description: PGP signature

Re: spf: no suitable relay for spf use found

2006-10-07 Thread Magnus Holmgren
spamassassin with an email containing headers, or is something broken with my setup? SA didn't find a jump from an external host to an internal one. Have you set up trusted_networks and/or internal_networks correctly? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail

Re: spf: no suitable relay for spf use found

2006-10-07 Thread Magnus Holmgren
On Saturday 07 October 2006 22:36, Tomasz Chmielewski took the opportunity to say: Magnus Holmgren wrote: On Friday 06 October 2006 11:47, Tomasz Chmielewski took the opportunity to say: When I test spamassassin setup by running spamassassin -D --lint, I get these complaints about

Re: RCVD_IN_WHOIS_INVALID

2006-09-23 Thread Magnus Holmgren
/dbcheck-invalidipwhois.cgi?IP=65.119.30.206 Apparently the listing, which was imported from rfc-ignorant.org two years ago, is obsolete. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpRCC0f1i58N.pgp Description: PGP signature

Re: checking local domains against spam

2006-09-20 Thread Magnus Holmgren
on your MTA/MDA setup. SpamAssassin scans everything that gets thrown on it. You have to tell us more or go ask the appropriate mailing list. -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgp4CkyZtzylp.pgp Description: PGP signature

Re: OS X Server spam still getting through :-(

2006-09-02 Thread Magnus Holmgren
haven't got a clue how fault find what's going wrong? Have you checked out http://wiki.apache.org/spamassassin/UsingSpamAssassin (Spam getting through?)? If you need more help you can attach one or two spam mails for us to analyze. -- Magnus Holmgren[EMAIL PROTECTED

Re: Strange SPF problem/wrong result

2006-09-01 Thread Magnus Holmgren
checks dont work unless you do the checks on the receiving host. SPF checks work (since the information needed is included in a Received: line that can be trusted), but you can't reject mail at SMTP time based on the result. -- Magnus Holmgren[EMAIL PROTECTED

Re: Strange SPF problem/wrong result

2006-09-01 Thread Magnus Holmgren
be in internal_networks (which default to trusted_networks, however). -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpv6eBFhyFku.pgp Description: PGP signature

Re: File mode set incorrectly

2006-08-31 Thread Magnus Holmgren
to be created, but for the files the x bits are masked off. Why would you want the databases to be executable? For auto_whitelist_file_mode, no matter what I set, it only becomes 0640. The same should be true for this one. -- Magnus Holmgren[EMAIL PROTECTED

Re: File mode set incorrectly

2006-08-31 Thread Magnus Holmgren
) and Mail::SpamAssassin::Plugin::AWL(3pm)). -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpYc7i3WUD60.pgp Description: PGP signature

BAYES_99_99 and such

2006-08-29 Thread Magnus Holmgren
end. This has been mentioned before on this list and I have added such rules locally. Question: Wouldn't it be wise to add them to the standard distribution as well? -- Magnus Holmgren[EMAIL PROTECTED] (No Cc of list mail needed, thanks) pgpDC7U1c74Y8.pgp

Re: Stupid phisher

2006-08-29 Thread Magnus Holmgren
phishers, has anyone thought about spamming them with phony personal data? It's probably not very effective with things that can automatically and instantly be verified, such as eBay credentials, but perhaps more effective with credit card numbers? -- Magnus Holmgren[EMAIL PROTECTED

Re: Stupid phisher

2006-08-29 Thread Magnus Holmgren
On Tuesday 29 August 2006 17:43, Gino Cerullo took the opportunity to say: On 29-Aug-06, at 7:49 AM, Magnus Holmgren wrote: On Monday 28 August 2006 01:00, Chris took the opportunity to say: This is a pretty good fake site except he left a little something from Mother Russia at the bottom

  1   2   >