Nabble - SpamAssassin - Blog Spam

Make Easy Money

2009-09-09T04:55:21Z

I cannot believe this will work!

scanner with mailfunction is listed as spam

2008-10-31T02:54:11Z

Hi i have a problem with a scanner, its on ip 192.1.0.40 an spamassassin tells all the time its spam, so i added the network to the locale.cf as trusted

trusted_networks 192.1.0/24

but this didnt solve the problem ( tryed 192.1.0.40 etc.. )

if i deaktivate spamassassin in amvis conf files i get the mail
so i think the problem is on spamassassin..

any ideas ?

Zlob Troian Spam Domain Variants

2007-12-14T02:58:11Z

I am aware of two Zlob Trojan redirect domains variants.

One is in the forum of an ActiveX that tries to install itself when a
contaminated Website is opened in a Browser.
When using Northon Anti Viras it would crash the browser and self installed
itself even if a user did not agree to installation. I do not know if this
problem with Norton AV has been fixed.

But using NOD32 perevents automatic installation and allows a user to close
the browser.

Variant two comes as a Java Cab that tries to install itself automatically
but using Sun Microsystem Virtual Java Machine I can chose not to accept the
installation.
http://www.java.com/en/index.jsp

There are different way that generates the attack. But all involve going to
cantaminated site. One porn video site and click on porn video embeded
pictures, another is just opening a url in a list of many URLs...

Thank you,
Igor Berger
PHSDL
Administrator

Alert Zlob Trojan using other domains besides Porn

2007-12-14T02:46:35Z

I just got a post with a free Web service domain url with flower sho file
name and glass sho file names that once I went to that url, there was a long
list of URLs that when clicked redirected to a Malware domain that pretends
to scan your computer.

One of the redirecting domains is yourflowershow.com

Zlob Trojan is morphing from Porn to general domains and URLs this is very
dangerous...

Igor Berger
PHSDL
Administrator

BlogSpammAssassin project is very important contributions by PHSDL

2007-12-12T14:57:00Z

I am really excited to bring my experience to BlogSpamAssassin project!

As a PHSDL developer and administrator I have been fighting forum and blog
comment Spam for a year now!
The biggest problem is Malware and redirect domain Spam in comments.

In devising an anti Spam Filter for blogs and forums, it is very pertenent
to use URL SBL not IP addresses.
A Spammer can use any one of the anonymous proxies to submit comments, but
their main intention is to promote some Website.

While Akismet and Karma use this type of technology the SBL is very broad
and includes off comment Spam. The users who build the Spam list are not IT
savy and will put all URL containing posts to the SBL, this is problematic
because it impedes communication and free speach! IT may even cause
unnecessary problems for the blog owner, with the user commentator believing
that the blog owner does not like them or thinks they are Spammers, where
they actually not!

Once a commentator is flagged as a Spammer by Akismet or Karam they are
prohibeted from posting on Akismet filter utelized blogs!
Please refer to a number of incidents documented by PHSDL
http://www.phsdl.net/phsdl-vs-akismet-complaint.php

PHSDL comments to ICANN blog were flagged as Spam, just today! I have
included the message of complaint to ICANN about this, refer to buttom of
this message.

I ahve been using SpamAssisn email filter with Cpanle for years, and never
had any problems, with false positive.
I apply some manual email filters to fine tune the Email SpamAssissin, which
I belive should be included in BlogSpamAssissin Filter as well by
SpamAssissin or by Wordpress and other developers.

BlogSpammAssin project developers you are welcome to use PHSDL public
Malware and redirect domains Spam list in your beta development.
http://www.phsdl.net/project_honeypot.php

This SBL domain list blocks 95 percent of Spam to PHSDL honeypot forum
http://www.travelinasia.net/forum/index.php

Please let me know how else I can help and contribute to this project.
Spam is bad, very bad, but be called a Spammer when you are a commentetor is
Even Worse!
Commentetors are Not Criminals!

Thank you
Igor Berger
PHSDL
Administrator
and
Developer
www.phsdl.net

----- Original Message -----
From: Igor Berger
To: Jason Keenan
Cc: icann@... ; Igor Berger
Sent: Thursday, December 13, 2007 6:24 AM
Subject: ICANN Public Blog Spam Filter False Positive Problem identified
by PHSDL

ICANN Public Blog Spam Filter False Positive Problem

There is a problem with ICANN public blog Spam filter identifying
commentators as potentional Spammers if there is a URL in a comment.

Once a commentetor has been flagged more than a few times that
commentator's IP address is blocked from commenting even if a URL is not
used in a message.

"Your IP address (XX.XXX.XXX.XXX) was recently used to post spam to this
website. For this reason, you are currently not allowed to post new content.
If you believe this is in error, please contact the site administrator."

This is a serious public image issue for ICANN, being that ICANN is
promoting this blog as a public forum for communication between Internet
users and ICANN.

I cannot even post on my PHSDL blog node! PHSDL is an anti Spam project
being flagged as a Spammer by ICANN???

Please unlock my account, and I will abstain from using URLs in comment
postings!
IMAO this Spam thing will drive all of us crazy!

My PHSDL node ICANN blog
http://public.icann.org/blog/2763

Meanwhile there is Spam postings http://public.icann.org/node/318
You must be using Akismet or Karma filter!
Please read this to understand the problem.
http://www.phsdl.net/phsdl-vs-akismet-complaint.php

Thank you,

Igor Berger
PHSDL
Administrator
www.phsdl.net

Re: PHSDL contribution to BlogSpamAssissin

2007-12-12T14:17:44Z

Sorry for the double posting but not use to using newsreader and a newsserver, luckally was able to find "There is also a forum-style user interface for the list at Nabble.com, where you can post questions and get answers without subscribing by mail."
http://www.nabble.com/SpamAssassin-f191.html
on
http://wiki.apache.org/spamassassin/MailingLists

I recommend to add the same to
http://wiki.apache.org/spamassassin/BlogSpamAssassin?highlight=(domain)%7C(spam)

Right next to the BlogSpamAssassin mailing list subscription instructions.

Some of us developers are blind as bats, we come in from the back door, and do not even know what is what. We all come from different schools of thought..:)

Thank you, and I hope to be a good contributer to the important project.

Igor

PHSDL wrote:

I just subscibe to the SpamAssassin Mailing list that deals with Blog Spam.
I like to contribute to the project. I tried to send a message with the URL of PHSDL project but the massage wast not posted to the list.
I am a developer and adminitrator for PHSDL - an anti Malware Spam domains tracking project, with remote server filtering technology.

Is there a problem that BlogSpamAssissin lists identifies all messages to the list with URLs as potential Spam and need to be approved by the list owner before becoming publicly visable? Are the new list posting being monitored by the owner for approval or if a message is flagged as potetial Spam it goes to a black hole?

Thank you,
Igor Berger
PHSDL
Administrator
and
Developer

PHSDL contribution to BlogSpamAssissin

2007-12-12T13:45:10Z

I just subscibe to the SpamAssassin Mailing list that deals with Blog Spam.
I like to contribute to the project. I tried to send a message with the URL of PHSDL project but the massage wast not posted to the list.
I am a developer and adminitrator for PHSDL - an anti Malware Spam domains tracking project, with remote server filtering technology.

Is there a problem that BlogSpamAssissin lists identifies all messages to the list with URLs as potential Spam and need to be approved by the list owner before becoming publicly visable? Are the new list posting being monitored by the owner for approval or if a message is flagged as potetial Spam it goes to a black hole?

Thank you,
Igor Berger
PHSDL
Administrator
and
Developer

PHSDL contribution to BlogSpamAssissin

2007-12-11T06:02:10Z

I just subscibe to the SpamAssassin Mailing list that deals with Blog Spam.
I like to contribute to the project, please do not put my project on your spam list..:)

I am a developer and adminitrator for PHSDL - an anti Malware Spam domains tracking project, with remote server filtering technology.
http://www.phsdl.net/project_honeypot.php public Spam domains list.

Thank you,
Igor Berger
PHSDL
Administrator
and
Developer
www.phsdl.net

Question concerning MIME_BOUND_NEXTPART

2007-01-06T16:04:58Z

----=_NextPart_001_0005_45a034b1.09C52269
----=_NextPart_001_0002_45a034b2.0E1F3F27
----=_NextPart_002_0006_45a0373f.08B98992
----=_NextPart_001_0004_45a034b3.0F75E7CC
----=_NextPart_003_0010_45a03785.0B45BD91

The 5 NextPart's above represent 5 random samplings of mail that is going
out via Sendmail 8.12. I have noticed that were inter-server mail is
generated and scored on Spamassassin 3.1.x that I am getting
MIME_BOUND_NEXTPART hits on all interoffice mail. Those entries look ok to
me but I haven't been able to find a specification anywhere on what is or
is not ok.

Can someone explain what is wrong with them? Do I need to re configure
mail clients or servers?

James

Indexing In Lucene

2006-10-03T02:46:46Z

Hi,
Can you tell me how indexing takes place in lucene(Depth).if
document has 1....n indices then which algorithm it uses,which
information retrival model it uses...

Thanks & Regards,

Akil Ajani

Cognizant Technology Solutions India Pvt. Ltd.

Plot # 26, Rajiv Gandhi Infotech Park, MIDC

Hinjewadi, Pune 411057

Tel: (91) (20) 40201100 ext 2825

Vnet: 22809

"Technical Skill is the mastery of complexity, while creativity is the
mastery of simplicity."

This e-mail and any files transmitted with it are for the sole use of the intended recipient(s) and may contain confidential and privileged information.
If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.
Any unauthorised review, use, disclosure, dissemination, forwarding, printing or copying of this email or any action taken in reliance on this e-mail is strictly
prohibited and may be unlawful.

Visit us at http://www.cognizant.com

What is: "AWL: Auto-whitelist adjustment"?

2006-08-15T06:06:53Z

Hi all!

My name is Harry Fröhlich and I am from Bethlehem, South Africa.

I am a financial adviser and am seriously thinking about doing a lot of my marketing to opt-in clients via e-mail. When I say "opt-in", it is not because they subscribe through a link on a web site, but because they telephonically give me permission to send these e-mails to them. I do not have a web site up and running (yet).

In the message body I use all sorts of strategies to convince them to respond (strategies gleened from copywriting courses I'd bought to "How to ensure your messages get read" e-books, etc.) - only to realise that the mail never even reach the clients waiting for them.

So I send the actual sales letter as MSWord attachments and they at least reach my clients.

This is not the easiest to continue doing, because a lot of the mail is personalised and creating personalised attachments through mail merging is a major obstacle (for me, that is).

I then found http://spamcheck.sitesell.com/ and used it to check the message. I also used http://www.ezinecheck.com/check.html.

These differ substantially as far as output values are concerned.

Spamcheck does not really say WHY it gets a specific score on a "topic" (at least with a "reason" that makes sense to a novice like me), whereas ezinecheck stipulate that "bigger", "money", "guarantee" etc are not good words to use.

On a message where I scored less than 1 with ezine, Spamcheck scored it 3.9, giving a value of 3.2 to something called "AWL: Auto White-list Adjustment".

What in blazes is this?

Is it something that is IN the message or something that is NOT, but which should be?

What must I check to rectify that problem?

Why is the other ezinecheck not concerned with it?

Please help!

Best possible wishes

Harry

Re: Mails regularly spammed

2006-06-15T11:41:53Z

Hi there,

It's very simple. Your message looks like spam, and is being filtered thus. If
you have a personal mail to your service provider, I suggest you call them
and complain. If your message is commercial and unsolicited, you're
screwed. They outthought you. If you really need to get your message
through, do it the oldfashioned way: Snail mail.

On 15 Jun 2006 at 2:48, Shibu wrote:

>
> Hello Out there,
> Sorry If Im knocking on the wrong door. But my problem is a bit crucial
> for me. I have been trying to send a business letter to one of our service
> providers. Everytime I send the mail its getting spammed. I have tried with
> all my official and personal accounts. (includes inbox, yahoo, gmail). I
> have also tried changing my subject. But everytime it ended being bounced
> back. Now I severely need a help on sending my mail over to the reciepient.
> foillowing are the error recieved.
> SMTP error from remote mail server after end of data:
> host xxx.xxxxx.xxx [xxx.xx.xxx.x]: 550 5.7.1 Blocked by SpamAssassin
>
> Im sorry to tell that I can tell you more on this ..
> Please, can any one give a light on this.
>
> Shibu Narayanan
> --
> View this message in context: http://www.nabble.com/Mails-regularly-spammed-t1791237.html#a4880088
> Sent from the SpamAssassin - Blog Spam forum at Nabble.com.
>
>

Regards
Ann Elisabeth
http://www.annelisabeth.com/blog/
http://spamhuntress.com/

Mails regularly spammed

2006-06-15T03:48:45Z

Hello Out there,
Sorry If Im knocking on the wrong door. But my problem is a bit crucial for me. I have been trying to send a business letter to one of our service providers. Everytime I send the mail its getting spammed. I have tried with all my official and personal accounts. (includes inbox, yahoo, gmail). I have also tried changing my subject. But everytime it ended being bounced back. Now I severely need a help on sending my mail over to the reciepient.
foillowing are the error recieved.
SMTP error from remote mail server after end of data:
host xxx.xxxxx.xxx [xxx.xx.xxx.x]: 550 5.7.1 Blocked by SpamAssassin

Im sorry to tell that I can tell you more on this ..
Please, can any one give a light on this.

Shibu Narayanan