Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 0188C200CE5 for ; Sat, 8 Jul 2017 05:06:12 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id F40B716A7C9; Sat, 8 Jul 2017 03:06:11 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 46ED316A7C8 for ; Sat, 8 Jul 2017 05:06:11 +0200 (CEST) Received: (qmail 24649 invoked by uid 500); 8 Jul 2017 03:06:03 -0000 Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@spamassassin.apache.org Received: (qmail 24637 invoked by uid 99); 8 Jul 2017 03:06:03 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 08 Jul 2017 03:06:03 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id A4868CD27B for ; Sat, 8 Jul 2017 03:06:02 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.121 X-Spam-Level: X-Spam-Status: No, score=-0.121 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id TtbN-0Fwr3wx for ; Sat, 8 Jul 2017 03:06:02 +0000 (UTC) Received: from mail-ua0-f173.google.com (mail-ua0-f173.google.com [209.85.217.173]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 42FF35F30B for ; Sat, 8 Jul 2017 03:06:01 +0000 (UTC) Received: by mail-ua0-f173.google.com with SMTP id z22so29975174uah.1 for ; Fri, 07 Jul 2017 20:06:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=yWiyp0YZTbEXk6DzqZsFqA3O2eSUwqvd1v4iK9Ja69U=; b=tNuK1yYdTQxx0+0oWTDHGfzE6uTUoI6C2ciIJbhGo8P5HAmY2dgQ0Xl4yjiPqIaPe/ x/gGsDaybtpp8y/UVW0uLAqe92zlDg8Lwx3UyvOPwZt+XH81/65d38FUIWLdWuGvnW0Y c85uZiP7och1aQyMwSseKRT1WLUG6kpxYBBlOqNxBPsR2URafk2K+E7siPdSkRQXPjvu AE8gkV7vR4uLKPHaLXuuw9t7Lms3ZwUWSFGEhLLOb3iZJHOibQtJ3WgTygKTwy3c+bnQ sTlMWimYUUrIijg7AI0/0oP3HdZMJTCukZZbjuNWIWtF2lf4ULa+BFS9z4B/+xlbCSHu l1XQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=yWiyp0YZTbEXk6DzqZsFqA3O2eSUwqvd1v4iK9Ja69U=; b=UYgn2pZYi5GY8+aXhCobhVmFUbgKbKrD9tBHAbNuj2cke8cgD1jMlzEu+mHt2CgpPO 3rV1WFObeg+aAZwCYf0DpTjmiPCJOqe1YhmeJXBGqTMa8fLKCFX5WjodVjH3yAyBxP29 GwuwPoClAl2a9s7YILHd9OlXPHzx2Ggu1vbn8avrJeAQvRKhX360NucRgsVA74pJ7jZu TqrWrkG/rvrecj3R/7fdhaB/fvR/1zuB02XbpON+KRZrTOTrpsJifKCWS5u3RVFA+yrA 7jKnKgMfv6DWkdCqOXQO+mvcr9QUNYvgqmDtJi36MC5lgI4TJMqCnWqSjVygXXoFSiM+ 4USQ== X-Gm-Message-State: AIVw110/cBS5qIN6YDd58gzU8doRQJxvR4eKi7TeLyYK0qGNT2ZvVzaY T2h31nJKwbzKyrZzAjAsd2qfaCJriA== X-Received: by 10.176.94.131 with SMTP id y3mr2490946uag.21.1499483160262; Fri, 07 Jul 2017 20:06:00 -0700 (PDT) MIME-Version: 1.0 Received: by 10.103.8.135 with HTTP; Fri, 7 Jul 2017 20:05:59 -0700 (PDT) In-Reply-To: <8c416950-607f-2db6-4569-93bf01ec967a@gmx.ch> References: <79BCA53105218D479EF78767C41D953F06227122@eros.vpn.ellipse.net> <5a07038e-e5ff-ced0-4d4a-49cc7a34000f@mcgrail.com> <8e1d47c8-82f7-ff52-22d1-bc3ac1054a15@ena.com> <79BCA53105218D479EF78767C41D953F06229501@eros.vpn.ellipse.net> <010559de-664e-3b5a-7988-24b65b36a813@ena.com> <8c416950-607f-2db6-4569-93bf01ec967a@gmx.ch> From: Alex Date: Fri, 7 Jul 2017 23:05:59 -0400 Message-ID: Subject: Re: Random word spams and wiki spams To: jahlives@gmx.ch, SA Mailing list Content-Type: text/plain; charset="UTF-8" archived-at: Sat, 08 Jul 2017 03:06:12 -0000 Hi, > Without that rule it might have flown below my sa-radar. > Got some scoring on it by using this plugin: > https://github.com/eilandert/Botnet.pm Be careful with the botnet plugin - it's terribly out of date and very prone to false-positives. It's just not effective anymore.