lots of spam getting through all of a sudden

Daniel Maher daniel.maher at ubisoft.com
Mon Jul 24 16:40:01 IST 2006


These are the RDJ rules I started with:
TRUSTED_RULESETS="SARE_ADULT SARE_OBFU0 SARE_URI0 SARE_FRAUD SARE_BML SARE_SPOOF SARE_HEADER0 SARE_SPECIFIC SARE_STOCKS"

Seems to be pretty safe. :)

--
  _
 °v°  Daniel Maher
/(_)\ Administrateur Système Unix
 ^ ^  Unix System Administrator
 
Sentio aliquos togatos contra me conspirare.
-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Phillip Udel
Sent: Monday, July 24, 2006 11:29 AM
To: 'MailScanner discussion'
Subject: RE: lots of spam getting through all of a sudden

LOL.   OK.  I Just found the SARE Site.  Lol Can I assume that everyone here
but me know about this site :).  Does anyone here use the RulesDuJour
script?

Any Suggestions on what rules would be safe to start using first?

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Phillip
Udel
Sent: Monday, July 24, 2006 9:30 AM
To: 'MailScanner discussion'
Subject: RE: lots of spam getting through all of a sudden

Wow.   Nice.

I assume the SARE are your own entries?
Who are the URIBL_BLACK  URIBL_JP_SURBL Sites?

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Denis
Beauchemin
Sent: Monday, July 24, 2006 8:56 AM
To: MailScanner discussion
Subject: Re: lots of spam getting through all of a sudden

Phillip Udel a écrit :
>
> I too received more than expected.   I am still looking into it.   
> Here are some of the mails of interest
>
>  *...*
>
> **
Philip,

They scored BIG here:

X-MailScanner-SpamCheck: n'est pas un polluriel (inscrit sur la liste
blanche),
	SpamAssassin (not cached, score=18.17, requis 5, BAYES_50 0.00,
	FIN_FREE 0.47, FORGED_RCVD_HELO 0.14, HTML_MESSAGE 0.00,
	HTML_TAG_BALANCE_BODY 0.23, INFO_TLD 1.27, SARE_LWHUGE 1.00,
	SARE_LWSYMFMT 1.66, SARE_MLB_Stock1 1.66, SARE_MLB_Stock6 1.66,
	SARE_OBFU_PART_ORT 1.67, SARE_RMML_Stock4 0.67,
	SARE_RMML_Stock7 0.75, URIBL_BLACK 3.00, URIBL_JP_SURBL 4.00)


Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045




-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 


More information about the MailScanner mailing list