You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Michael Monnerie <m....@zmi.at> on 2006/04/06 09:52:26 UTC
Announce: GERMAN ruleset updated
I'd like to inform you that my GERMAN ruleset has been updates. It's
available via RulesDuJour as ruleset ZMI_GERMAN, or directly from
http://zmi.at/x/70_zmi_german.cf
I always update after new rules are applied, so the use of RulesDuJour
is greatly suggested.
Please, if you use my ruleset and still get german SPAM, report to
sare-german@zmi.at the *full mail with all headers*.
Any suggestions for improvement of the rules are welcome. The rules are
written with an eye on creating no false positives, while hitting
phishing, some viruses, and other german SPAM. Should you get a false
positive, please send the e-mail with full headers to
sare-german@zmi.at
mfg zmi
--
// Michael Monnerie, Ing.BSc --- it-management Michael Monnerie
// http://zmi.at Tel: 0660/4156531 Linux 2.6.11
// PGP Key: "lynx -source http://zmi.at/zmi2.asc | gpg --import"
// Fingerprint: EB93 ED8A 1DCD BB6C F952 F7F4 3911 B933 7054 5879
// Keyserver: www.keyserver.net Key-ID: 0x70545879
Re: Announce: GERMAN ruleset updated
Posted by Michael Monnerie <mi...@it-management.at>.
On Donnerstag, 6. April 2006 10:41 Alex Broens wrote:
> Also the RASSISMUS_MAILS_* rules seems like extra boat which at
> wouldn't hit the msgs they were targeted for and could possibly cause
> FPS with scores that high.
Yes, I just inserted them some days ago, and forgot to adopt scores,
which I did now. Thanks for that.
> Why not replace URI rules with a SURBL/URIBL listing if they are
> still active? and will not cause FPs (Vistaprint?)
Because I don't know whether they are listed there, and there are people
not using online lists, and all this rules are german specific and
maybe don't get a listing there ever. What's Vistaprint?
mfg zmi
--
// Michael Monnerie, Ing.BSc ----- http://it-management.at
// Tel: 0660/4156531 .network.your.ideas.
// PGP Key: "lynx -source http://zmi.at/zmi3.asc | gpg --import"
// Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE
// Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE
Re: Announce: GERMAN ruleset updated
Posted by Alex Broens <sa...@alexb.ch>.
On 06.04.2006 10:26, Jim Knuth wrote:
> Heute (06.04.2006/10:17 Uhr) schrieb Alex Broens,
>
>> On 06.04.2006 09:52, Michael Monnerie wrote:
>>> I'd like to inform you that my GERMAN ruleset has been updates. It's
>>> available via RulesDuJour as ruleset ZMI_GERMAN, or directly from
>>>
>>> http://zmi.at/x/70_zmi_german.cf
>>>
>>> I always update after new rules are applied, so the use of RulesDuJour
>>> is greatly suggested.
>>>
>>> Please, if you use my ruleset and still get german SPAM, report to
>>> sare-german@zmi.at the *full mail with all headers*.
>>>
>>> Any suggestions for improvement of the rules are welcome. The rules are
>>> written with an eye on creating no false positives, while hitting
>>> phishing, some viruses, and other german SPAM. Should you get a false
>>> positive, please send the e-mail with full headers to
>>> sare-german@zmi.at
>>>
>>> mfg zmi
>
>> Michael
>
>> FYI: file fell thru lint...
>
>> [27121] warn: config: warning: score set for non-existent rule
>> ZMIde_SUBFREEHANB
>
> typo ;) must be ZMIde_SUBFREEHAND
Just wonder why this is announced as a SARE rule but its not available
as a SARE dowload and was never passed theu SARE masscheckers.
Also the RASSISMUS_MAILS_* rules seems like extra boat which at wouldn't
hit the msgs they were targeted for and could possibly cause FPS with
scores that high.
Why not replace URI rules with a SURBL/URIBL listing if they are still
active? and will not cause FPs (Vistaprint?)
Alex
Re: Announce: GERMAN ruleset updated
Posted by Jim Knuth <jk...@jkart.de>.
Heute (06.04.2006/10:17 Uhr) schrieb Alex Broens,
> On 06.04.2006 09:52, Michael Monnerie wrote:
>> I'd like to inform you that my GERMAN ruleset has been updates. It's
>> available via RulesDuJour as ruleset ZMI_GERMAN, or directly from
>>
>> http://zmi.at/x/70_zmi_german.cf
>>
>> I always update after new rules are applied, so the use of RulesDuJour
>> is greatly suggested.
>>
>> Please, if you use my ruleset and still get german SPAM, report to
>> sare-german@zmi.at the *full mail with all headers*.
>>
>> Any suggestions for improvement of the rules are welcome. The rules are
>> written with an eye on creating no false positives, while hitting
>> phishing, some viruses, and other german SPAM. Should you get a false
>> positive, please send the e-mail with full headers to
>> sare-german@zmi.at
>>
>> mfg zmi
> Michael
> FYI: file fell thru lint...
> [27121] warn: config: warning: score set for non-existent rule
> ZMIde_SUBFREEHANB
typo ;) must be ZMIde_SUBFREEHAND
> Alex
--
Viele Gruesse, Kind regards,
Jim Knuth
jk@jkart.de
ICQ #277289867
----------
Zufalls-Zitat
----------
Als Mensch kann man vernünftig denken und trotzdem unsinnig
handeln.
----------
Der Text hat nichts mit dem Empfaenger der Mail zu tun
----------
Virus free. Checked by NOD32 Version 1.1474 Build 7022 05.04.2006
Re: Announce: GERMAN ruleset updated
Posted by Michael Monnerie <mi...@it-management.at>.
On Donnerstag, 6. April 2006 10:17 Alex Broens wrote:
> FYI: file fell thru lint...
> [27121] warn: config: warning: score set for non-existent rule
> ZMIde_SUBFREEHANB
Hi, that was a last-second-change small typo, is corrected in actual
version already.
> and although announced as SARE rule,
> http://www.rulesemporium.com/rules/70_zmi_german.cf is not
> available...
It's not SARE, they didn't want it there because they cannot check
against their SPAM. Obviously there's nobody german speaking there.
It's available via rdj, I was informed that this tool is independent of
SARE, I also mixed that up in the beginning.
> and there's no reference to a SARE masscheck...
...which I don't run as it's not SARE. I participate in SA mass checks,
but my rules are not active there. Another problem is that I don't have
all SPAM directly available, but get it forwarded to write the rules.
Extracting the SPAM from such forwards and reinserting it into my SPAM
box is a PITA, so I skip that.
I didn't get a single report of FP until now, but can see several SPAM
hitting my rules (especially those suggesting having sex today).
mfg zmi
--
// Michael Monnerie, Ing.BSc ----- http://it-management.at
// Tel: 0660/4156531 .network.your.ideas.
// PGP Key: "lynx -source http://zmi.at/zmi3.asc | gpg --import"
// Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE
// Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE
Re: Announce: GERMAN ruleset updated
Posted by Alex Broens <sa...@alexb.ch>.
On 06.04.2006 09:52, Michael Monnerie wrote:
> I'd like to inform you that my GERMAN ruleset has been updates. It's
> available via RulesDuJour as ruleset ZMI_GERMAN, or directly from
>
> http://zmi.at/x/70_zmi_german.cf
>
> I always update after new rules are applied, so the use of RulesDuJour
> is greatly suggested.
>
> Please, if you use my ruleset and still get german SPAM, report to
> sare-german@zmi.at the *full mail with all headers*.
>
> Any suggestions for improvement of the rules are welcome. The rules are
> written with an eye on creating no false positives, while hitting
> phishing, some viruses, and other german SPAM. Should you get a false
> positive, please send the e-mail with full headers to
> sare-german@zmi.at
>
> mfg zmi
Michael
FYI: file fell thru lint...
[27121] warn: config: warning: score set for non-existent rule
ZMIde_SUBFREEHANB
and although announced as SARE rule,
http://www.rulesemporium.com/rules/70_zmi_german.cf is not available...
and there's no reference to a SARE masscheck...
.-)
Alex