Re: qconfirm not sending challenge

Here's an example of the type of spam messages that are slipping through :

Received: (qmail 3238 invoked by uid 1001); 2 Jun 2004 18:17:14 -0000
Received: (qmail 3216 invoked from network); 2 Jun 2004 18:17:14 -0000
Received: from unknown (HELO localhost.localdomain) (127.0.0.1)
  by localhost with SMTP; 2 Jun 2004 18:17:14 -0000
Received: from 209.xxx.xxx.180 ([202.92.180.157] [202.92.180.157])
 by 209-xxx-xxx-180.myisp.ca (VaMailArmor-2.0.1.16) id 03192-3E46CFC2;
 Wed, 02 Jun 2004 14:17:04 -0400
Received: from 145.104.39.68 by [email protected]
with DAV;
 Sat, 05 Jun 2004 19:21:39 +0100
X-Message-Info: 74UC947IDdvs7zNtcnRYK9Y8vxnKRHsjA274
Message-ID: <614034822516520.22082@[email protected]>
X-Originating-IP: [137.48.200.164]
X-Originating-Email: [[email protected]]
X-Sender: [email protected]
Reply-To: "Jannie Friedman" <[email protected]>
From: "Jannie Friedman" <[email protected]>
To: "Admin" <[email protected]>
Subject: *****SPAM***** tilt coachmen cohomology deaf  Admin
Date: Sat, 05 Jun 2004 22:21:39 +0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="--=====328485314194344=_"
X-AntiVirus: checked by Vexira MailArmor (version: 2.0.1.16; VAE: 6.25.0.60;
VDF: 6.25.0.82; host: mydomain.com)
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
 server.mydomain.com
X-Spam-Report:
 *  0.5 HTML_50_60 BODY: Message is 50% to 60% HTML
 *  0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
 * -0.3 BAYES_30 BODY: Bayesian spam probability is 30 to 40%
 *      [score: 0.3929]
 *  0.1 HTML_MESSAGE BODY: HTML included in message
 *  4.1 FORGED_RCVD_NET_HELO Host HELO'd using the wrong IP network
 *  1.3 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
 *  1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
X-Spam-Status: Yes, hits=7.0 required=5.0
tests=BAYES_30,FORGED_RCVD_NET_HELO,
 HTML_50_60,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,
 MIME_HTML_ONLY_MULTI autolearn=no version=2.61
X-Spam-Level: ******

----=====328485314194344=_
Content-Type: text/html;
 charset="iso-2621-6"
Content-Transfer-Encoding: 7Bit

----- Original Message ----- 
From: "James C. Logan" <[email protected]>
To: <[email protected]>
Sent: Wednesday, June 02, 2004 2:23 PM
Subject: Re: qconfirm not sending challenge


> I've managed to come up with a .qmail combination that works well for me :
>
> | qconfirm-check -n -d /home/mydomain.com/users/jim_test/.qconfirm
> | spamc | /usr/bin/filepipe /usr/bin/vdeliver -d -r
>
> The only issue I'm faced with now (other than everyone clamouring to have
> this setup on their email accounts!) is as the postmaster I'm getting
quite
> a few delayed delivery notices. That and those sleazebag spammers that use
a
> from, for example, like jim_test at mydomain.com.
>
> ----- Original Message ----- 
> From: "Clemens Fischer" <[email protected]>
> To: <[email protected]>
> Sent: Tuesday, June 01, 2004 8:10 AM
> Subject: Re: qconfirm not sending challenge
>
>
> > * Gerrit Pape:
> >
> > > On Sun, May 30, 2004 at 04:39:08PM -0400, James C. Logan wrote:
> > >> here's the contents of my .qmail-jim_test file :
> > >>
> > >> | spamc | qconfirm-check -n -d
/home/mydomain/users/jim_test/.qconfirm
> > >
> > > qconfirm-check needs standard input to be a seekable file descriptor.
> >
> > you might have a look at the conn-tools' seekablepipe program, which
makes
> > a pipe appear seakable for the reader, using a temp file.  i think there
> > are others whose names don't come to my mind atm.
> >
> > see http://www.skarnet.org/software/conn-tools/seekablepipe-io.html
> >
> > maybe also google for filepipe?
> >
> >   clemens
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.692 / Virus Database: 453 - Release Date: 5/30/2004
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.692 / Virus Database: 453 - Release Date: 5/30/2004