You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Justin Mason <jm...@jmason.org> on 2006/04/13 19:05:49 UTC
Re: New bayes poison
That's a valid DK sig;
0.0 DK_POLICY_SIGNSOME Domain Keys: policy says domain signs some mails
0.0 DK_POLICY_TESTING Domain Keys: policy says domain is testing DK
0.0 DK_SIGNED Domain Keys: message has a signature
-0.0 DK_VERIFIED Domain Keys: signature passes verification
The spammer used the Yahoo! webmail infrastructure (probably via an
automated HTTP client) to send his spam.
--j.
Michael Monnerie writes:
> Hi, I just received some new bayes poison attempt. I never had one so
> large, maybe that could start to be a bit of problem?
>
> Also, this message seems to have a domainkeys sig. Is SA testing for the
> validity of that?
>
> mfg zmi
> --
> // Michael Monnerie, Ing.BSc ----- http://it-management.at
> // Tel: 0660/4156531 .network.your.ideas.
> // PGP Key: "lynx -source http://zmi.at/zmi3.asc | gpg --import"
> // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE
> // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE
> part 1.2 message/rfc822 12K Guilbert Rubie <pierrette90631yvonne
> Date: Thu, 13 Apr 2006 07:36:56 PDT
> To: bmcfarland@saddleback.cc.ca.us
> cc: alqdgfhrubqent@uahitmtvbryajlagmlx.net,
> samba-survey@zmi.at,
> dbxqyu5pxbcupteaunktll@caregreat.com,
> protoclastic@herrenvolkn.int,
> rosawhitehorn@sisna.com,
> itj@jxqexuyegbclinyduwzznxb.org,
> emigree@plumbicm.org,
> rmg@gaba.net,
> lsmith10@metrolink.net,
> sij@appellate.benton.net,
> chamber_tulk@hotmail.com,
> rm4.2997625@news4.tin.it,
> management@mrmusiko.com,
> caked@institutionalizedj.an,
> juray.dewilde@ugent.be,
> julia.balshuesemann@materna.de,
> datldo@eircom.net,
> holzb@redwood.vkm.com,
> omega8001@discountvegetarian.com,
> caja@compuserve.com,
> mihailk@earthlink.net,
> chernicolas@hotmail.com,
> kaprysek@op.pl,
> bmko_hr@hankooktire.com,
> support@heartland.net,
> info@cricket.com.np,
> polyhydric@brassish.correctionalisty.mo,
> iiqml@pmk.tw,
> michaelsnielsen@hotmail.com,
> contact@webdevonline.co.uk,
> l6ifwygpevb@verizon.net,
> nxugmpxhwybfqxbd_frn5lo@uagadugu.biz,
> smt@comcast.net
> From: Guilbert Rubie <pi...@yahoo.com>
> Subject: Re: Your life. coco palm
>
> --0-1842833854-1144939016=:13721
> Content-Type: text/plain; charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
>
> T piece land crab half-dying
> Sacrament sunday square-threaded truth-dictated
>
> F A S T T R A C K D E G R E E P R O G R A M
> Obtain the degree you deserve, based on your present knowledge and life experie
> nce.
> A prosperous future, money earning power, and the Admiration of all.
> Degrees from an Established, Prestigious, Leading Institution.
> Your Degree will show exactly what you really can do.
> Get the Job, Promotion, Business Opportunity
> and Social Advancement you Desire!
> Eliminates classrooms and traveling.
> Achieve your Bachelors, Masters, MBA, or PhD
> in the field of your expertise
> Professional and affordable
> Call now - your Graduation is a phone call away.
> Please call:
> 1.206.984.0002
> Calls returned promptly
>
> sierra juniper scutch cane reversion pendulum vine-shadowed dorcas gazelle twic
> e-brought
> short-twisted heath scrub terror-preaching figure dancer majolica painter Parma
> red
> bar screen self-pointed eagle-billed flat-toothed homing pigeon blueback mullet
> tip-tap fat-bellied cherry-wood steamer trunk stone crusher pastry tube
> inch-thick compensation balance school age toe-punch buaze fiber self-spacing
> r-less dim-brooding inspector general woman-grown construction bond tone-produc
> ing
> box family reflux value wine presser series spectra two-hour face-saving
> shore grass adding machine ridge plow three-flowered satin-faced tracker bar
> pull pin itch tree two-pronged urn-enclosing high-reared middle-rate
> slide bar saw brier pickax team puff shark apple moth carnal-minded
> Crypto-jew brick-fronted pouncet box no-account three-row self-valuing
> wall card brace piece passion-proud self-taxation oscillation circuit well-thou
> ght
> quasi exposure tin-bound stag-horned parti-colored psalm book jack bowl
> thimble skein yellow-funneled pre-emptible grub hook many-acred all-grasping
> border world half-liberal fence-off mis-center cutting angle contact action
> mild-seeming kanya butter Semi-pelagianism probate duty ice gorge stub file
> sun grass jaw slide recruiting ground tin putty Red polled hoodie crow
> pseudo realism life-teeming free-armed ship-minded sword dancer barnacle scale
> meadow grass re-embrace quasi celebration ilang-ilang carriage washer tormentor
> wing
> saddle roof hop clover loblolly sweetwood cloth-shearing master rod pardon chai
> r
> blue-hot assistant driver short period church school Pro-castilian deep-drenche
> d
> hydrogen chloride lake-surrounded pigeon-toed black-and-white leather-lined mel
> on moth
> stock power rail ender terror-striking three-branched earth-engendered imaginal
> bud
> wool spinner border ground cold-water paint gas disease sky pilot center line
> sea arrow grass earth wave grip wheel rush-woven arm garter skill facet
> cushion aloe wing divider stencil cutter squaw mint open-worked reversion spect
> roscope
> hammer butt ill-humoredness quasi enemy pseudo tribe rope brake half-divine
> test object salmon fisherman breaker-up ground willow tea-loving gang hook
> brass-mounted pseudo judge quasi consignment trophy tax pressure-regulating sea
> time
> quia-quia sprat loon steady pin de-ethicization cross modulation steel magnate
> quasi-converted meadow queen sense faculty metal-slitting sickly-looking pock-m
> arked
> too-bigness worm conveyer light-haired joint fir balance gate turban toque
> foot jaw nigh-destroyed jam nut njave oil sticktight flea flint skinning
> wax cluster flat-cheeked stiff-leaved twig-lined banyan tree pendant switch
> twice-reconciled bearing timber roof-building cube-shaped silver-bordered summe
> r egg
> alfalfa looper shoot-off well-stationed dragon arum ovate-cuneate axle stool
> fission bomb ammonia turpeth glass painting re-reject ear coverts swine thistle
> hoop pine almenn turma knee-bent hammer break land cod sea wheat
> house barge base vervain flak train rag-boiling re-entice cattle floater
> cinder concrete pigeon-breastedness reproduction cost upright-hearted ovate-tri
> angular double double cap
> Taurus cluster sack store breakfast bell frost-fettered blue-devilism casing kn
> ife
> wall speedwell sam-sodden spine-covered stone dressing sweat gland volatile alk
> ali
> cream beige sorry-looking collar tie apple scab yellow-fin bur cucumber
> polka mazurka mogul locomotive crimson-spotted red-lead putty brake assembler n
> ote-blindness
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> --0-1842833854-1144939016=:13721
> Content-Type: text/html; charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
>
> T piece land crab half-dying<br>
> Sacrament sunday square-threaded truth-dictated<br>
> <br>
> F A S T T R A C K D E G R E E P R O G R A M <br>
> Obtain the degree you deserve, based on your present knowledge and life experie
> nce.<br>
> A prosperous future, money earning power, and the Admiration of all.<br>
> Degrees from an Established, Prestigious, Leading Institution.<br>
> Your Degree will show exactly what you really can do.<br>
> Get the Job, Promotion, Business Opportunity<br>
> and Social Advancement you Desire!<br>
> Eliminates classrooms and traveling.<br>
> Achieve your Bachelors, Masters, MBA, or PhD<br>
> in the field of your expertise<br>
> Professional and affordable<br>
> Call now - your Graduation is a phone call away.<br>
> Please call:<br>
> 1.206.984.0002<br>
> Calls returned promptly<br>
> <br>
> sierra juniper scutch cane reversion pendulum vine-shadowed dorcas gazelle twic
> e-brought<br>
> short-twisted heath scrub terror-preaching figure dancer majolica painter Parma
> red<br>
> bar screen self-pointed eagle-billed flat-toothed homing pigeon blueback mullet
> <br>
> tip-tap fat-bellied cherry-wood steamer trunk stone crusher pastry tube<br>
> inch-thick compensation balance school age toe-punch buaze fiber self-spacing<b
> r>
> r-less dim-brooding inspector general woman-grown construction bond tone-produc
> ing<br>
> box family reflux value wine presser series spectra two-hour face-saving<br>
> shore grass adding machine ridge plow three-flowered satin-faced tracker bar<br
> >
> pull pin itch tree two-pronged urn-enclosing high-reared middle-rate<br>
> slide bar saw brier pickax team puff shark apple moth carnal-minded<br>
> Crypto-jew brick-fronted pouncet box no-account three-row self-valuing<br>
> wall card brace piece passion-proud self-taxation oscillation circuit well-thou
> ght<br>
> quasi exposure tin-bound stag-horned parti-colored psalm book jack bowl<br>
> thimble skein yellow-funneled pre-emptible grub hook many-acred all-grasping<br
> >
> border world half-liberal fence-off mis-center cutting angle contact action<br>
> mild-seeming kanya butter Semi-pelagianism probate duty ice gorge stub file<br>
> sun grass jaw slide recruiting ground tin putty Red polled hoodie crow<br>
> pseudo realism life-teeming free-armed ship-minded sword dancer barnacle scale<
> br>
> meadow grass re-embrace quasi celebration ilang-ilang carriage washer tormentor
> wing<br>
> saddle roof hop clover loblolly sweetwood cloth-shearing master rod pardon chai
> r<br>
> blue-hot assistant driver short period church school Pro-castilian deep-drenche
> d<br>
> hydrogen chloride lake-surrounded pigeon-toed black-and-white leather-lined mel
> on moth<br>
> stock power rail ender terror-striking three-branched earth-engendered imaginal
> bud<br>
> wool spinner border ground cold-water paint gas disease sky pilot center line<b
> r>
> sea arrow grass earth wave grip wheel rush-woven arm garter skill facet<br>
> cushion aloe wing divider stencil cutter squaw mint open-worked reversion spect
> roscope<br>
> hammer butt ill-humoredness quasi enemy pseudo tribe rope brake half-divine<br>
> test object salmon fisherman breaker-up ground willow tea-loving gang hook<br>
> brass-mounted pseudo judge quasi consignment trophy tax pressure-regulating sea
> time<br>
> quia-quia sprat loon steady pin de-ethicization cross modulation steel magnate<
> br>
> quasi-converted meadow queen sense faculty metal-slitting sickly-looking pock-m
> arked<br>
> too-bigness worm conveyer light-haired joint fir balance gate turban toque<br>
> foot jaw nigh-destroyed jam nut njave oil sticktight flea flint skinning<br>
> wax cluster flat-cheeked stiff-leaved twig-lined banyan tree pendant switch<br>
> twice-reconciled bearing timber roof-building cube-shaped silver-bordered summe
> r egg<br>
> alfalfa looper shoot-off well-stationed dragon arum ovate-cuneate axle stool<br
> >
> fission bomb ammonia turpeth glass painting re-reject ear coverts swine thistle
> <br>
> hoop pine almenn turma knee-bent hammer break land cod sea wheat<br>
> house barge base vervain flak train rag-boiling re-entice cattle floater<br>
> cinder concrete pigeon-breastedness reproduction cost upright-hearted ovate-tri
> angular double double cap<br>
> Taurus cluster sack store breakfast bell frost-fettered blue-devilism casing kn
> ife<br>
> wall speedwell sam-sodden spine-covered stone dressing sweat gland volatile alk
> ali<br>
> cream beige sorry-looking collar tie apple scab yellow-fin bur cucumber<br>
> polka mazurka mogul locomotive crimson-spotted red-lead putty brake assembler n
> ote-blindness<br><p>__________________________________________________<br>Do Yo
> u Yahoo!?<br>Tired of spam? Yahoo! Mail has the best spam protection around <b
> r>http://mail.yahoo.com
> --0-1842833854-1144939016=:13721--
Re: New bayes poison
Posted by Theo Van Dinter <fe...@apache.org>.
On Fri, Apr 14, 2006 at 09:33:10AM -0400, Steven W. Orr wrote:
> I added the following line to my init.pre
The line is already in v310.pre, you can just uncomment it.
> Apr 14 09:26:04 saturn spamd[14286]: BEGIN failed--compilation aborted at
> /usr/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/Plugin/DomainKeys.pm line
> 44.
> Apr 14 09:26:04 saturn spamd[14286]: Compilation failed in require at
> (eval 21) line 1.
Do you have the required Mail::DomainKeys module installed (as listed
in the INSTALL doc)?
--
Randomly Generated Tagline:
Computers run on faith, not electrons.
Re: New bayes poison
Posted by "Steven W. Orr" <st...@syslang.net>.
On Thursday, Apr 13th 2006 at 17:53 -0400, quoth Theo Van Dinter:
=>On Thu, Apr 13, 2006 at 11:45:07PM +0200, Michael Monnerie wrote:
=>> > �0.0 DK_POLICY_SIGNSOME � � Domain Keys: policy says domain signs
=>> > some mails 0.0 DK_POLICY_TESTING � � �Domain Keys: policy says domain
=>> > is testing DK 0.0 DK_SIGNED � � � � � � �Domain Keys: message has a
=>> > signature -0.0 DK_VERIFIED � � � � � �Domain Keys: signature passes
=>>
=>> Where to get these rules?
=>
=>They're standard in 3.1 if you have enabled the
=>Mail::SpamAssassin::Plugin::DomainKeys plugin.
I added the following line to my init.pre
and when I restart sa I get these in my maillog.
Apr 14 09:26:04 saturn spamd[14286]: BEGIN failed--compilation aborted at
/usr/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/Plugin/DomainKeys.pm line
44.
Apr 14 09:26:04 saturn spamd[14286]: Compilation failed in require at
(eval 21) line 1.
Apr 14 09:26:04 saturn spamd[14286]: plugin: failed to create instance of
plugin Mail::SpamAssassin::Plugin::DomainKeys: Can't locate object method
"new" via package "Mail::SpamAssassin::Plugin::DomainKeys" at (eval 22)
line 1.
But when I try to install the missing package it says:
Mail::SpamAssassin::Plugin::DomainKeys is up to date (undef).
Any advice?
--
steveo at syslang dot net TMMP1 http://frambors.syslang.net/
Do you have neighbors who are not frambors?
Re: New bayes poison
Posted by Theo Van Dinter <fe...@apache.org>.
On Thu, Apr 13, 2006 at 11:45:07PM +0200, Michael Monnerie wrote:
> > 0.0 DK_POLICY_SIGNSOME Domain Keys: policy says domain signs
> > some mails 0.0 DK_POLICY_TESTING Domain Keys: policy says domain
> > is testing DK 0.0 DK_SIGNED Domain Keys: message has a
> > signature -0.0 DK_VERIFIED Domain Keys: signature passes
>
> Where to get these rules?
They're standard in 3.1 if you have enabled the
Mail::SpamAssassin::Plugin::DomainKeys plugin.
--
Randomly Generated Tagline:
"Note that I am a proponent of Zen in the Art of Systems Administration,
and thus believe that it's appropriate to present yourself as a beginner
in all things. This helps you keep a fresh perspective and spank the
unsuspecting at snooker." - Benjy Feen
Re: New bayes poison
Posted by Michael Monnerie <mi...@it-management.at>.
On Donnerstag, 13. April 2006 19:05 Justin Mason wrote:
> 0.0 DK_POLICY_SIGNSOME Domain Keys: policy says domain signs
> some mails 0.0 DK_POLICY_TESTING Domain Keys: policy says domain
> is testing DK 0.0 DK_SIGNED Domain Keys: message has a
> signature -0.0 DK_VERIFIED Domain Keys: signature passes
> verification
Where to get these rules?
mfg zmi
--
// Michael Monnerie, Ing.BSc ----- http://it-management.at
// Tel: 0660/4156531 .network.your.ideas.
// PGP Key: "lynx -source http://zmi.at/zmi3.asc | gpg --import"
// Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE
// Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE