lots of spam getting through all of a sudden
Daniel Maher
daniel.maher at ubisoft.com
Mon Jul 24 16:40:01 IST 2006
These are the RDJ rules I started with:
TRUSTED_RULESETS="SARE_ADULT SARE_OBFU0 SARE_URI0 SARE_FRAUD SARE_BML SARE_SPOOF SARE_HEADER0 SARE_SPECIFIC SARE_STOCKS"
Seems to be pretty safe. :)
--
_
°v° Daniel Maher
/(_)\ Administrateur Système Unix
^ ^ Unix System Administrator
Sentio aliquos togatos contra me conspirare.
-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Phillip Udel
Sent: Monday, July 24, 2006 11:29 AM
To: 'MailScanner discussion'
Subject: RE: lots of spam getting through all of a sudden
LOL. OK. I Just found the SARE Site. Lol Can I assume that everyone here
but me know about this site :). Does anyone here use the RulesDuJour
script?
Any Suggestions on what rules would be safe to start using first?
-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Phillip
Udel
Sent: Monday, July 24, 2006 9:30 AM
To: 'MailScanner discussion'
Subject: RE: lots of spam getting through all of a sudden
Wow. Nice.
I assume the SARE are your own entries?
Who are the URIBL_BLACK URIBL_JP_SURBL Sites?
-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Denis
Beauchemin
Sent: Monday, July 24, 2006 8:56 AM
To: MailScanner discussion
Subject: Re: lots of spam getting through all of a sudden
Phillip Udel a écrit :
>
> I too received more than expected. I am still looking into it.
> Here are some of the mails of interest
>
> *...*
>
> **
Philip,
They scored BIG here:
X-MailScanner-SpamCheck: n'est pas un polluriel (inscrit sur la liste
blanche),
SpamAssassin (not cached, score=18.17, requis 5, BAYES_50 0.00,
FIN_FREE 0.47, FORGED_RCVD_HELO 0.14, HTML_MESSAGE 0.00,
HTML_TAG_BALANCE_BODY 0.23, INFO_TLD 1.27, SARE_LWHUGE 1.00,
SARE_LWSYMFMT 1.66, SARE_MLB_Stock1 1.66, SARE_MLB_Stock6 1.66,
SARE_OBFU_PART_ORT 1.67, SARE_RMML_Stock4 0.67,
SARE_RMML_Stock7 0.75, URIBL_BLACK 3.00, URIBL_JP_SURBL 4.00)
Denis
--
_
°v° Denis Beauchemin, analyste
/(_)\ Université de Sherbrooke, S.T.I.
^ ^ T: 819.821.8000x2252 F: 819.821.8045
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list