Topic: Foreign Email - Spam / Virus

[Olsen]

I debugged the .cf files.  You are right, the word wrap was killing me!  After correcting the files, I have not gotten any german emails.  

If I get in to work tomorrow with no german emails, I will be a happy (employed) man!

[kruhm]

maybe we could get a corrected posting for the community to easily wget?

[z80]

I've been getting loads of german spam too. The funny thing is though it comes from the iinet (perth western australia) IP address of 203.59.9.138

I'll ring Iinet as I'm the closes one.

[cc_skavenger]

Sorry about that.  I have gone through the files and fixed the line wrapping issues.  These files came from several websites, so there may be duplicate rules in them. Here is a listing of the files:

http://www.ccskavenger.info/sober-worm-spamassassin-rules/german_bounce_spam.cf

http://www.ccskavenger.info/sober-worm-spamassassin-rules/german_spam.cf

http://www.ccskavenger.info/sober-worm-spamassassin-rules/sober-p.cf

http://www.ccskavenger.info/sober-worm-spamassassin-rules/sober_p.cf

or


wget http://www.ccskavenger.info/sober-worm-spamassassin-rules/german_bounce_spam.cf

wget http://www.ccskavenger.info/sober-worm-spamassassin-rules/german_spam.cf

wget http://www.ccskavenger.info/sober-worm-spamassassin-rules/sober-p.cf

wget http://www.ccskavenger.info/sober-worm-spamassassin-rules/sober_p.cf

Please let me know of any other issues.
Thanks.

[Olsen]

RE:kruhm

In order to correct cc_skavenger's files I simply had to remove the line breaks and the word wrapping.  It is important that everyone know that spamassassin will not work properly by just using the wget command to download the files into the /etc/mail/spamassassin directory.  Even when I downloaded the files that way, the text wrapping was still causing me grief.

After getting all the files, I simply used pico to remove the extra line breaks and spacing.  It is also important to know that you cannot go to the end of the line and hit <delete> or <space>.  To get the text to space properly for parsing purposes, you must go to the beginning of the line below and hit <backspace>.  This will put all of the text in each function on one line.  

I could post my cf files, but the text wrap will still cause people issues.

I have not gotten any more German Emails....WHEW!

here is a list of custom .cf files I am using:
german.cf
german-spam.cf
german_bounce_spam.cf
sober_p.cf

HOPE THIS HELPS

[cc_skavenger]

I have fixed the files.  Users can do a wget and not have any issues.

Thanks

[Olsen]

Nice work cc_skavenger.

I was looking over the files and here are some unresolved errors.

File: german_spam.cf
meta __SUB_RASSISMUS_3 (__RASSISMUSHD_1 + __RASSISMUSHD_2 + __RASSISMUSHD_3 >=
1)
**** remove the line break after "RASSISMUSHD_3 >=" *****

Other than that....NICE!!!

Thanks for hosting these files for others to use!

[Olsen]

Now user can do a wget and not have any issues.

I was writing my post at the same time you were skavenger...

Again, thanks for your hard work.

[cc_skavenger]

File: german_spam.cf
meta __SUB_RASSISMUS_3 (__RASSISMUSHD_1 + __RASSISMUSHD_2 + __RASSISMUSHD_3 >=
1)
**** remove the line break after "RASSISMUSHD_3 >=" *****

Olsen,

Is this error still there?  I don't seem to see it....

[Olsen]

The error is no longer there.  Great job!