Re: "bout u" campaign

On Mon, 17 Jul 2017 18:38:24 +0100, David Jones wrote: It would be nice if there was a local tool that could be part of the SA project that would extend the masscheck processing and help build content and meta rules. As John's already mentioned, there is a surprising array

Re: "bout u" campaign

On 07/17/2017 12:03 PM, Jesse Norell wrote: This description: On Thu, 2017-07-13 at 15:07 +0100, Martin Gregorie wrote: I'm continuing to get good results from a multi-level approach: I use two or more subrules with low scores (0.01 or so) that are combined by an AND relation in a meta-rule

Re: "bout u" campaign

On Mon, 17 Jul 2017, Jesse Norell wrote: Does masscheck automate meta rule creation? (ie. not just generate scores) Not the full "evolution filter" idea which would have to run on the endpoint, but that would benefit everyone via rule updates. No, it does not. There were a couple of rule

Re: "bout u" campaign

This description: On Thu, 2017-07-13 at 15:07 +0100, Martin Gregorie wrote: > I'm continuing to get good results from a multi-level approach: > > I use two or more subrules with low scores (0.01 or so) that are > combined by an AND relation in a meta-rule that triggers a suitably > spammy score

Re: "bout u" campaign

On 07/15/2017 09:42 AM, RW wrote: On Thu, 13 Jul 2017 18:26:54 -0400 Alex wrote: Hi, Are you paying for DCC? I think we're over their limit and they blacklisted us long ago, lol. I have my own DCC server joined into the DCC network. https://www.dcc-servers.net/dcc/ So you only provide

Re: "bout u" campaign

On Thu, 13 Jul 2017 18:26:54 -0400 Alex wrote: > Hi, > > >> Are you paying for DCC? I think we're over their limit and they > >> blacklisted us long ago, lol. > > > > I have my own DCC server joined into the DCC network. > > > > https://www.dcc-servers.net/dcc/ > > So you only provide spam

Re: "bout u" campaign

On 07/14/2017 09:22 PM, Alex wrote: Hi, The ENA_BAD_SPAM rule is a combination of 2 different types (reputation and content) rules with an AND between them. For example (this is is about one-third of the rule): Is it usable like this? Try it out with a score of 0.001 and see what you

Re: "bout u" campaign

Hi, >>> The ENA_BAD_SPAM rule is a combination of 2 different types (reputation >>> and >>> content) rules with an AND between them. For example (this is is about >>> one-third of the rule): >> >> Is it usable like this? > > Try it out with a score of 0.001 and see what you think. It should

Re: "bout u" campaign

On 07/13/2017 05:26 PM, Alex wrote: Hi, Are you paying for DCC? I think we're over their limit and they blacklisted us long ago, lol. I have my own DCC server joined into the DCC network. https://www.dcc-servers.net/dcc/ So you only provide spam services for your own users? Or do you pay?

Re: "bout u" campaign

Hi, > I SHORTCIRCUIT any trustworthy sender with a legit unsubscribe process to > put control back in the hands/mouse of the end user. I also SHORTCIRCUIT > with whitelist_auth any domains (primarily subdomains) that are > system-generated and consistently score very low. Just now received this

Re: "bout u" campaign

Hi, >> Are you paying for DCC? I think we're over their limit and they >> blacklisted us long ago, lol. > > I have my own DCC server joined into the DCC network. > > https://www.dcc-servers.net/dcc/ So you only provide spam services for your own users? Or do you pay? > I am classifying about

Re: "bout u" campaign

On Thu, 2017-07-13 at 13:26 -0400, Alex wrote: > Would you be willing to share a few examples? > You can download the script processor and documentation from here: http://www.libelle-systems.com/free/ Its called 'portmanteau' and is a .tgz compressed tar archive Contact me offlist if you want

Re: "bout u" campaign

On 07/13/2017 12:56 PM, Dave Jones wrote: On 07/13/2017 12:39 PM, Alex wrote: Hi, header RCVD_IN_SENDERSCORE_0_29 eval:check_rbl('senderscore0-lastexternal','score.senderscore.com.','^127\.0\.4\.([1-2]?[0-9])$') describeRCVD_IN_SENDERSCORE_0_29Senderscore.org score

Re: "bout u" campaign

On 07/13/2017 12:39 PM, Alex wrote: Hi, header RCVD_IN_SENDERSCORE_0_29 eval:check_rbl('senderscore0-lastexternal','score.senderscore.com.','^127\.0\.4\.([1-2]?[0-9])$') describeRCVD_IN_SENDERSCORE_0_29Senderscore.org score of 0 to 29 score

Re: "bout u" campaign

Hi, > header RCVD_IN_SENDERSCORE_0_29 > eval:check_rbl('senderscore0-lastexternal','score.senderscore.com.','^127\.0\.4\.([1-2]?[0-9])$') > describeRCVD_IN_SENDERSCORE_0_29Senderscore.org score of 0 > to 29 > score RCVD_IN_SENDERSCORE_0_295.2 > tflags

Re: "bout u" campaign

On 07/13/2017 12:03 PM, @lbutlr wrote: On Jul 12, 2017, at 8:18 PM, David Jones wrote: -2.2 RCVD_IN_SENDERSCORE_90_100 Senderscore.org score of 90 to 100 I haven’t seen that before (or not that I’ve noticed). Is it part fo the base SA package or something that was added?

Re: "bout u" campaign

Hi, On Thu, Jul 13, 2017 at 12:01 PM, Dianne Skoll wrote: > On Wed, 12 Jul 2017 21:04:37 -0400 > Alex wrote: > >> Has anyone else experienced a spam campaign with any one of the >> following subjects: > >> - sometimes enjoy it wild, how bout you?

Re: "bout u" campaign

Hi, On Thu, Jul 13, 2017 at 10:07 AM, Martin Gregorie wrote: > On Thu, 2017-07-13 at 12:59 +, Charles Amstutz wrote: >> I find it challenging to constantly keep up with campaign's. My >> guess with the phone number is to try to make it seem more >> legitimate. >> More

Re: "bout u" campaign

On Jul 12, 2017, at 8:18 PM, David Jones wrote: > -2.2 RCVD_IN_SENDERSCORE_90_100 Senderscore.org score of 90 to 100 I haven’t seen that before (or not that I’ve noticed). Is it part fo the base SA package or something that was added? -- Apple broke AppleScripting signatures

Re: "bout u" campaign

On Thu, 13 Jul 2017 15:56:59 + Charles Amstutz wrote: > Thanks, > > I was looking at the default RBL lists > > https://wiki.apache.org/spamassassin/DnsBlocklists > > But was looking for other things that are free for commercial use. I > found this that is possible. > >

RE: "bout u" campaign

On Thu, 13 Jul 2017, Charles Amstutz wrote: Hello, For the inexeperienced, what is the difference between lashback and lastexternal. "lashback" is a DNSBL "lastexternal" is which MTA gets checked against that DNSBL. In this case, the last MTA external to your network - the MTA that handed

Re: "bout u" campaign

On Thu, 13 Jul 2017 16:00:14 + Charles Amstutz Top-Posted: > Hello, > > For the inexeperienced, what is the difference between lashback and > lastexternal. lashback is just a label, the difference is between eval:check_rbl('LASHBACK', ... and eval:check_rbl('LASHBACK-lastexternal',

Re: "bout u" campaign

On 07/13/2017 11:00 AM, Charles Amstutz wrote: Hello, For the inexeperienced, what is the difference between lashback and lastexternal. Infinite Systems Charles Amstutz | Systems Administrator charl...@infinitesys.com 402.477.2474

RE: "bout u" campaign

- From: David Jones [mailto:djo...@ena.com] Sent: Thursday, July 13, 2017 11:13 AM To: users@spamassassin.apache.org Subject: Re: "bout u" campaign On 07/13/2017 10:56 AM, RW wrote: > On Thu, 13 Jul 2017 09:33:04 -0400 > Alex wrote: > >> On Thu, Jul 13, 2017 at 9:29 AM, C

Re: "bout u" campaign

On 07/13/2017 10:56 AM, RW wrote: On Thu, 13 Jul 2017 09:33:04 -0400 Alex wrote: On Thu, Jul 13, 2017 at 9:29 AM, Charles Amstutz wrote: How do you use lashback? It says that it is free to use for commercial and non commercial use. How do I set it up? Drop this

Re: "bout u" campaign

On Wed, 12 Jul 2017 21:04:37 -0400 Alex wrote: > Has anyone else experienced a spam campaign with any one of the > following subjects: > - sometimes enjoy it wild, how bout you? > - sometimes like it ruff, what bout you? > - sumtimes enjoy it ruff, wat bout you? 144

RE: "bout u" campaign

68508   -Original Message- From: RW [mailto:rwmailli...@googlemail.com] Sent: Thursday, July 13, 2017 10:57 AM To: users@spamassassin.apache.org Subject: Re: "bout u" campaign On Thu, 13 Jul 2017 09:33:04 -0400 Alex wrote: > On Thu, Jul 13, 2017 at 9:29 AM, Charles Amst

RE: "bout u" campaign

Thanks, I was looking at the default RBL lists https://wiki.apache.org/spamassassin/DnsBlocklists But was looking for other things that are free for commercial use. I found this that is possible. http://0spam.fusionzero.com/ but don't know if wanyone had experience with it, or could make

Re: "bout u" campaign

On Thu, 13 Jul 2017 09:33:04 -0400 Alex wrote: > On Thu, Jul 13, 2017 at 9:29 AM, Charles Amstutz > wrote: > > How do you use lashback? It says that it is free to use for > > commercial and non commercial use. How do I set it up? > > Drop this into your local.cf or

Re: "bout u" campaign

On Thu, 2017-07-13 at 12:59 +, Charles Amstutz wrote: > I find it challenging to constantly keep up with campaign's.  My > guess with the phone number is to try to make it seem more > legitimate.  > More recent, I try to look for general characteristics and go for > that, in order to

RE: "bout u" campaign

: Thursday, July 13, 2017 8:33 AM To: Charles Amstutz <charl...@infinitesys.com>; SA Mailing list <users@spamassassin.apache.org> Subject: Re: "bout u" campaign On Thu, Jul 13, 2017 at 9:29 AM, Charles Amstutz <charl...@infinitesys.com> wrote: > How do you use la

Re: "bout u" campaign

On Thu, Jul 13, 2017 at 9:29 AM, Charles Amstutz wrote: > How do you use lashback? It says that it is free to use for commercial and > non commercial use. How do I set it up? Drop this into your local.cf or similar: header RCVD_IN_LASHBACK eval:check_rbl('LASHBACK',

RE: "bout u" campaign

Street, Suite 302 | Lincoln, NE 68508   -Original Message- From: David Jones [mailto:djo...@ena.com] Sent: Thursday, July 13, 2017 8:17 AM To: users@spamassassin.apache.org Subject: Re: "bout u" campaign On 07/12/2017 09:50 PM, Alex wrote: > Hi, > >> pretty

RE: "bout u" campaign

, Suite 302 | Lincoln, NE 68508   -Original Message- From: David Jones [mailto:djo...@ena.com] Sent: Thursday, July 13, 2017 8:17 AM To: users@spamassassin.apache.org Subject: Re: "bout u" campaign On 07/12/2017 09:50 PM, Alex wrote: > Hi, > >> pretty high mainly d

Re: "bout u" campaign

On 07/12/2017 09:50 PM, Alex wrote: Hi, pretty high mainly due to DCC and BAYES_99. Are you paying for DCC? I think we're over their limit and they blacklisted us long ago, lol. I have my own DCC server joined into the DCC network. https://www.dcc-servers.net/dcc/ I guess I have well

RE: "bout u" campaign

I find it challenging to constantly keep up with campaign's. My guess with the phone number is to try to make it seem more legitimate. More recent, I try to look for general characteristics and go for that, in order to futureproof rules. However, there are always legitimate emails being sent

Re: "bout u" campaign

On 12.07.17 22:50, Alex wrote: pretty high mainly due to DCC and BAYES_99. Are you paying for DCC? I think we're over their limit and they blacklisted us long ago, lol. Configure your own DCC server and connect to their network. It is not a paid service (paid is if you don't connect server

Re: "bout u" campaign

Hi, > pretty high mainly due to DCC and BAYES_99. Are you paying for DCC? I think we're over their limit and they blacklisted us long ago, lol. > I guess I have well trained Bayes. I think you just don't have many one-liner emails as a regular course of business? > 1.2 RCVD_IN_LASHBACK

Re: "bout u" campaign

On 07/12/2017 08:04 PM, Alex wrote: Hi all, Has anyone else experienced a spam campaign with any one of the following subjects: - sometimes enjoy it wild, how bout you? - sometimes like it ruff, what bout you? - sumtimes enjoy it ruff, wat bout you? The body contains something like "wild

Re: "bout u" campaign

On 7/12/2017 9:04 PM, Alex wrote: Has anyone else experienced a spam campaign with any one of the following subjects: 0 hits today on this, nothing that's gotten through for me on our servers.

"bout u" campaign

Hi all, Has anyone else experienced a spam campaign with any one of the following subjects: - sometimes enjoy it wild, how bout you? - sometimes like it ruff, what bout you? - sumtimes enjoy it ruff, wat bout you? The body contains something like "wild hukups" then a phone number.