Re: Why is the advertising for certain berry not caught

2009-04-26 Thread Igor Chudov
On Sat, Apr 25, 2009 at 11:06:47PM +0100, Ned Slider wrote: John Hardin wrote: On Fri, 24 Apr 2009, LuKreme wrote: On 24-Apr-2009, at 10:41, Igor Chudov wrote: I get a shipload of spams like this one: http://igor.chudov.com/tmp/spam007.txt Scores very high here. 2.0 URIBL_BLACK

Re: Why is the advertising for certain berry not caught

2009-04-26 Thread Bill Landry
Igor Chudov wrote: OK, dumb question, how would I implement greylisting (I have Ubuntu) That depends on what MTA you are using. Most greylisting is performed by milters or, if using Postfix, policy delegation. Check your MTA's web site, they will usually advise you on how to implement

Re: Why is the advertising for certain berry not caught

2009-04-25 Thread John Hardin
On Fri, 24 Apr 2009, LuKreme wrote: On 24-Apr-2009, at 10:41, Igor Chudov wrote: I get a shipload of spams like this one: http://igor.chudov.com/tmp/spam007.txt Scores very high here. 2.0 URIBL_BLACKContains an URL listed in the URIBL blacklist

Re: Why is the advertising for certain berry not caught

2009-04-25 Thread Ned Slider
John Hardin wrote: On Fri, 24 Apr 2009, LuKreme wrote: On 24-Apr-2009, at 10:41, Igor Chudov wrote: I get a shipload of spams like this one: http://igor.chudov.com/tmp/spam007.txt Scores very high here. 2.0 URIBL_BLACKContains an URL listed in the URIBL blacklist

Re: Why is the advertising for certain berry not caught

2009-04-25 Thread John Hardin
On Sat, 2009-04-25 at 23:06 +0100, Ned Slider wrote: John Hardin wrote: Igor, you might also want to implement greylisting, to give the URIBLs a chance to list URIs that appear in these messages. Interesting concept - do you have any data to support the hypothesis? Nope. I tried

Why is the advertising for certain berry not caught

2009-04-24 Thread Igor Chudov
I get a shipload of spams like this one: http://igor.chudov.com/tmp/spam007.txt These advertise certain berries, but also other equally worthless gimmicks. These spammers started snowshoeing but as time went on, predictably they became more brazen. I have the latest ubuntu 9.04 and I was

Re: Why is the advertising for certain berry not caught

2009-04-24 Thread Igor Chudov
On Fri, Apr 24, 2009 at 11:41:31AM -0500, Igor Chudov wrote: I get a shipload of spams like this one: http://igor.chudov.com/tmp/spam007.txt By the way, look at these spams. The afiliate URL is mentioned once or twice, and then the remove URL. The remove URL is like affiliate URL, different

Re: Why is the advertising for certain berry not caught

2009-04-24 Thread Rick Macdougall
Igor Chudov wrote: I get a shipload of spams like this one: http://igor.chudov.com/tmp/spam007.txt These advertise certain berries, but also other equally worthless gimmicks. These spammers started snowshoeing but as time went on, predictably they became more brazen. I have the latest

Re: Why is the advertising for certain berry not caught

2009-04-24 Thread Adam Katz
Igor Chudov wrote: http://igor.chudov.com/tmp/spam007.txt [...] Am I missing some rulesets or what? Check Razor2 with this command: spamassassin --lint -D 21 |grep -C2 Razor it should say module installed: Razor2::Client::Agent and loading Mail::SpamAssassin::Plugin::Razor2 (and since

Re: Why is the advertising for certain berry not caught

2009-04-24 Thread LuKreme
On 24-Apr-2009, at 10:41, Igor Chudov wrote: I get a shipload of spams like this one: http://igor.chudov.com/tmp/spam007.txt Scores very high here. Content analysis details: (9.6 points, 5.0 required) pts rule name description --