Re: Bitcoin update

2018-10-05 Thread John Hardin
On Fri, 5 Oct 2018, Zinski, Steve wrote: Here's how I'm blocking bitcoin emails with Unicode characters embedded: body__BTC1 /\b[13][a-km-zA-HJ-NP-Z1-9]{25,34}\b/ body__BTC2 /\b\W*b\W*i\W*t\W*c\W*o\W*i\W*n\W*\b/i body__BTC3 /\b\W*b\W*t\W*c\W*\b/i body

Re: Bitcoin update

2018-10-05 Thread John Hardin
On Fri, 5 Oct 2018, Pedro David Marco wrote: >On Thursday, October 4, 2018, 9:08:10 PM GMT+2, Kevin A. McGrail wrote: >Interesting.  Any chance for an unmodified pastebin spample? Yes please Joseph... any  change for it, please?  We are hungry...  Test rule checked into my sandbox last

Re: Bitcoin update

2018-10-05 Thread sebast...@debianfan.de
https://pastebin.com/TRD7FzRQ i have a sample here Am 05.10.2018 um 19:50 schrieb Zinski, Steve: Yes, absolutely. On 10/5/18, 1:42 PM, "John Hardin" wrote: On Fri, 5 Oct 2018, Zinski, Steve wrote: > Here's how I'm blocking bitcoin emails with Unicode characters embedded:

Re: Bitcoin update

2018-10-05 Thread Zinski, Steve
Yes, absolutely. On 10/5/18, 1:42 PM, "John Hardin" wrote: On Fri, 5 Oct 2018, Zinski, Steve wrote: > Here's how I'm blocking bitcoin emails with Unicode characters embedded: > > body__BTC1 /\b[13][a-km-zA-HJ-NP-Z1-9]{25,34}\b/ > body__BTC2

Re: Bitcoin update

2018-10-05 Thread Zinski, Steve
Here's how I'm blocking bitcoin emails with Unicode characters embedded: body__BTC1 /\b[13][a-km-zA-HJ-NP-Z1-9]{25,34}\b/ body__BTC2 /\b\W*b\W*i\W*t\W*c\W*o\W*i\W*n\W*\b/i body__BTC3 /\b\W*b\W*t\W*c\W*\b/i body__BTC4

Reporting gmail spam/fraud/phishing

2018-10-05 Thread John Hardin
Folks: It looks like Google is trying to kill off gmail-ab...@google.com again. Does anybody have a gmail abuse mailbox address that actually works (i.e. that Google actually reads, in addition to merely being deliverable)? A webform is *not* an acceptable alternative. "Don't Be Evil." Bah.

Re: Bitcoin update

2018-10-05 Thread John Hardin
On Fri, 5 Oct 2018, sebast...@debianfan.de wrote: https://pastebin.com/TRD7FzRQ i have a sample here There doesn't appear to be any obfuscation (apart from the email address) in that message... -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.org

Re: Bitcoin update

2018-10-05 Thread Rupert Gallagher
> https://pastebin.com/TRD7FzRQ > I have a sample here There are at least three reasons to reject that e-mail upfront, with no need to parse its body.

Re: Bitcoin update

2018-10-05 Thread David Jones
On 10/5/18 4:38 PM, Antony Stone wrote: > On Friday 05 October 2018 at 23:26:12, Rupert Gallagher wrote: > >>> https://pastebin.com/TRD7FzRQ >>> >>> I have a sample here >> >> There are at least three reasons to reject that e-mail upfront, with no >> need to parse its body. > > Hints might be

Re: Reporting gmail spam/fraud/phishing

2018-10-05 Thread Benny Pedersen
John Hardin skrev den 2018-10-05 19:45: It looks like Google is trying to kill off gmail-ab...@google.com again. abuse@ ignorants ?

Re: Bitcoin update

2018-10-05 Thread Antony Stone
On Friday 05 October 2018 at 23:26:12, Rupert Gallagher wrote: > > https://pastebin.com/TRD7FzRQ > > > > I have a sample here > > There are at least three reasons to reject that e-mail upfront, with no > need to parse its body. Hints might be appreciated for the uninitiated. Antony. PS:

Re: Bitcoin update

2018-10-05 Thread John Hardin
On Fri, 5 Oct 2018, Zinski, Steve wrote: Yes, absolutely. OK, cleaned up a bit and checked in. We'll see what masscheck thinks... On 10/5/18, 1:42 PM, "John Hardin" wrote: On Fri, 5 Oct 2018, Zinski, Steve wrote: > Here's how I'm blocking bitcoin emails with Unicode characters

Re: Bitcoin update

2018-10-05 Thread Pedro David Marco
>On Thursday, October 4, 2018, 9:08:10 PM GMT+2, Kevin A. McGrail wrote: >Interesting.  Any chance for an unmodified pastebin spample? Yes please Joseph... any  change for it, please?  We are hungry...  ---PedroD

Re: spamassassin-3.4.2 and reload command

2018-10-05 Thread Vlad Shpolyanskiy
sa-spamd.sa-spamd Just in case I have attached FreeBSD script. May be you are right, I posted to the wrong place, should address this to the FreeBSD port maintainer. -- Sent from:

Re: spamassassin-3.4.2 and reload command

2018-10-05 Thread Kevin A. McGrail
On 10/5/2018 4:22 AM, Vlad Shpolyanskiy wrote: > sa-spamd.sa-spamd > > Just in case I have attached FreeBSD script. > May be you are right, I posted to the wrong place, should address this to > the FreeBSD port maintainer.