Re: blacklist by sender description, not by send e-mail address?

2014-10-20 Thread Michael Opdenacker
Greetings, On 10/17/2014 06:37 PM, Bowie Bailey wrote: On 10/17/2014 12:13 PM, Axb wrote: On 10/17/2014 06:02 PM, Michael Opdenacker wrote: Greetings, I'm receiving a specific type of spam which From header is always like: From: service by foobar u...@example.org These guys always use by

Re: blacklist by sender description, not by send e-mail address?

2014-10-20 Thread Axb
On 10/20/2014 11:40 AM, Michael Opdenacker wrote: Greetings, On 10/17/2014 06:37 PM, Bowie Bailey wrote: On 10/17/2014 12:13 PM, Axb wrote: On 10/17/2014 06:02 PM, Michael Opdenacker wrote: Greetings, I'm receiving a specific type of spam which From header is always like: From: service by

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-20 Thread Matus UHLAR - fantomas
On Fri, 17 Oct 2014 12:13:49 +0100 Martin Gregorie mar...@gregorie.org wrote: On Thu, 2014-10-16 at 22:37 -0700, Cathryn Mataga wrote: The score is only 1.9, 3.5 required. What's going on here? X-Spam-Status: No, score=1.9 required=3.5 tests=BAYES_50,DKIM_SIGNED,

Slightly OT- nolisting

2014-10-20 Thread Robert Moskowitz
SInce this is about mail and spam, I thought this might be a good place to ask about nolisting: http://en.wikipedia.org/wiki/Nolisting I get ~ 7000 messages/day on my server, with ~70% getting tagged as spam. This is really private mailserver for my side consulting business and for all the

yahoo rcvd bug?

2014-10-20 Thread Quinn Comendant
I'm getting FORGED_YAHOO_RCVD false positives for messages with yahoo received headers that do not match the search pattern defined in check_for_forged_yahoo_received_headers(). I'm using SpamAssassin 3.3.2 with latest rules as per `sa-update` rule channels `sought.rules.yerp.org` and

Re: Slightly OT- nolisting

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 14:18 schrieb Robert Moskowitz: SInce this is about mail and spam, I thought this might be a good place to ask about nolisting: http://en.wikipedia.org/wiki/Nolisting I get ~ 7000 messages/day on my server, with ~70% getting tagged as spam. This is really private mailserver

Re: yahoo rcvd bug?

2014-10-20 Thread Axb
On 10/20/2014 02:26 PM, Quinn Comendant wrote: I'm getting FORGED_YAHOO_RCVD false positives for messages with yahoo received headers that do not match the search pattern defined in check_for_forged_yahoo_received_headers(). I'm using SpamAssassin 3.3.2 with latest rules as per `sa-update`

Re: yahoo rcvd bug?

2014-10-20 Thread Axb
On 10/20/2014 02:26 PM, Quinn Comendant wrote: Full mail headers available athttps://cloudup.com/cbmG8tJF71k Pls put on pastebin - cloudup timesout

Re: yahoo rcvd bug?

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 14:51 schrieb Axb: On 10/20/2014 02:26 PM, Quinn Comendant wrote: I'm getting FORGED_YAHOO_RCVD false positives for messages with yahoo received headers that do not match the search pattern defined in check_for_forged_yahoo_received_headers(). I'm using SpamAssassin 3.3.2 with

Re: yahoo rcvd bug?

2014-10-20 Thread Axb
On 10/20/2014 02:56 PM, Reindl Harald wrote: Am 20.10.2014 um 14:51 schrieb Axb: On 10/20/2014 02:26 PM, Quinn Comendant wrote: I'm getting FORGED_YAHOO_RCVD false positives for messages with yahoo received headers that do not match the search pattern defined in

Re: yahoo rcvd bug?

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 16:25 schrieb Axb: On 10/20/2014 02:56 PM, Reindl Harald wrote: seems your recursor couldn't resolve it, so your MTA added unknown... works for me: Received: from nm46-vm10.bullet.mail.bf1.yahoo.com (nm46-vm10.bullet.mail.bf1.yahoo.com [216.109.114.203]) what happens in

Re: yahoo rcvd bug?

2014-10-20 Thread Axb
On 10/20/2014 04:37 PM, Reindl Harald wrote: Am 20.10.2014 um 16:25 schrieb Axb: On 10/20/2014 02:56 PM, Reindl Harald wrote: seems your recursor couldn't resolve it, so your MTA added unknown... works for me: Received: from nm46-vm10.bullet.mail.bf1.yahoo.com

Re: getting tons of SPAM

2014-10-20 Thread motty cruz
here are the RBLs I am using: reject_rbl_client b.barracudacentral.org, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net is there a way to block *.eu and *.link ? here is part of local.cf # Set the threshold at which a message is considered spam (default:

Re: getting tons of SPAM

2014-10-20 Thread Axb
On 10/20/2014 04:48 PM, motty cruz wrote: here are the RBLs I am using: reject_rbl_client b.barracudacentral.org, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net is there a way to block *.eu and *.link ? block means *reject*, right? use Postfix access

Re: yahoo rcvd bug?

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 16:43 schrieb Axb: On 10/20/2014 04:37 PM, Reindl Harald wrote: Am 20.10.2014 um 16:25 schrieb Axb: On 10/20/2014 02:56 PM, Reindl Harald wrote: seems your recursor couldn't resolve it, so your MTA added unknown... Received: from nm46-vm10.bullet.mail.bf1.yahoo.com

Re: getting tons of SPAM

2014-10-20 Thread motty cruz
Hello Axb, yes you're right I am trying to reject emails that end with *.eu and *.link. can I do a wild card *.eu? *.link? Thanks, On Mon, Oct 20, 2014 at 7:51 AM, Axb axb.li...@gmail.com wrote: On 10/20/2014 04:48 PM, motty cruz wrote: here are the RBLs I am using: reject_rbl_client

Re: getting tons of SPAM

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 17:00 schrieb motty cruz: yes you're right I am trying to reject emails that end with *.eu and *.link. can I do a wild card *.eu? *.link? http://www.postfix.org/access.5.html http://www.postfix.org/regexp_table.5.html http://www.postfix.org/pcre_table.5.html On Mon, Oct

Re: getting tons of SPAM

2014-10-20 Thread John Wilcock
Le 20/10/2014 17:03, Reindl Harald a écrit : Am 20.10.2014 um 17:00 schrieb motty cruz: yes you're right I am trying to reject emails that end with *.eu and *.link. can I do a wild card *.eu? *.link? http://www.postfix.org/access.5.html http://www.postfix.org/regexp_table.5.html

Re: getting tons of SPAM

2014-10-20 Thread Robert Schetterer
Am 20.10.2014 um 17:17 schrieb John Wilcock: Le 20/10/2014 17:03, Reindl Harald a écrit : Am 20.10.2014 um 17:00 schrieb motty cruz: yes you're right I am trying to reject emails that end with *.eu and *.link. can I do a wild card *.eu? *.link? http://www.postfix.org/access.5.html

Re: distribute bayes with rsync

2014-10-20 Thread RW
On Fri, 17 Oct 2014 20:04:11 +0200 Reindl Harald wrote: a perfect trained bayes on the inbound spamfirewall * after recently a account was hacked and sent spam (luckily not massive by rate-limits) which would have been clearly caught by SA/spamass-milter i consider to

Re: yahoo rcvd bug?

2014-10-20 Thread Dave Funk
On Mon, 20 Oct 2014, Quinn Comendant wrote: I'm getting FORGED_YAHOO_RCVD false positives for messages with yahoo received headers that do not match the search pattern defined in check_for_forged_yahoo_received_headers(). I'm using SpamAssassin 3.3.2 with latest rules as per `sa-update` rule

Re: distribute bayes with rsync

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 18:03 schrieb RW: On Fri, 17 Oct 2014 20:04:11 +0200 Reindl Harald wrote: a perfect trained bayes on the inbound spamfirewall * after recently a account was hacked and sent spam (luckily not massive by rate-limits) which would have been clearly caught by

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-20 Thread jdebert
On Mon, 20 Oct 2014 12:39:57 +0200 Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 17.10.14 10:08, jdebert wrote: Will URIBL_BLOCKED cause [SPAM] to be inserted into Subject? no, it will more likely cause [SPAM] _not_ to be inserted, because it wouldn't be detected. Good. Had me worried

Re: Slightly OT- nolisting

2014-10-20 Thread jdebert
On Mon, 20 Oct 2014 08:18:51 -0400 Robert Moskowitz r...@htt-consult.com wrote: SInce this is about mail and spam, I thought this might be a good place to ask about nolisting: http://en.wikipedia.org/wiki/Nolisting I get ~ 7000 messages/day on my server, with ~70% getting tagged as spam.

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-20 Thread Cathryn Mataga
On 10/20/14, 9:46 AM, jdebert wrote: On Mon, 20 Oct 2014 12:39:57 +0200 Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 17.10.14 10:08, jdebert wrote: Will URIBL_BLOCKED cause [SPAM] to be inserted into Subject? no, it will more likely cause [SPAM] _not_ to be inserted, because it

dns: bad dns reply: Connection refused

2014-10-20 Thread Chris
The complete error shown in my syslog is: Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, no more alternatives Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection refused Up until this time I saw no issues. Running SA 3.4.0 on

Re: Give a penalty to messages with non latin UTF-8 characters?

2014-10-20 Thread Philip Prindeville
On Oct 17, 2014, at 9:53 AM, Michael Opdenacker michael.opdenac...@free-electrons.com wrote: On 09/01/2014 01:39 AM, LuKreme wrote: On 31 Aug 2014, at 14:38 , Ian Zimmerman i...@buug.org wrote: Doesn't ok_languages and ok_locales do the job? It does for me. Not with UTF-8 encoding, that

Re: dns: bad dns reply: Connection refused

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 20:06 schrieb Chris: The complete error shown in my syslog is: Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, no more alternatives Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection refused looks like

Re: dns: bad dns reply: Connection refused

2014-10-20 Thread Chris
On Mon, 2014-10-20 at 13:06 -0500, Chris wrote: The complete error shown in my syslog is: Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, no more alternatives Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection refused

Re: dns: bad dns reply: Connection refused

2014-10-20 Thread Kevin A. McGrail
On 10/20/2014 2:06 PM, Chris wrote: The complete error shown in my syslog is: Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, no more alternatives Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection refused Up until this time

Re: dns: bad dns reply: Connection refused

2014-10-20 Thread Kevin A. McGrail
On 10/20/2014 2:06 PM, Chris wrote: The complete error shown in my syslog is: Oct 20 11:41:44 localhost spamd[2155]: dns: sendto() to [127.0.0.1]:53 failed: Connection refused, no more alternatives Oct 20 11:41:44 localhost spamd[2155]: dns: bad dns reply: Connection refused Up until this time

Re: Give a penalty to messages with non latin UTF-8 characters?

2014-10-20 Thread Reindl Harald
Am 20.10.2014 um 20:09 schrieb Philip Prindeville: I don’t understand why Apple’s Mail.app, for instance, defaults to Win-1252 here in the US. That’s braindead well, ask the Firefox developers why they use to say charset is windows-1252 in recent releases while in fact the http-headers as

Re: Slightly OT- nolisting

2014-10-20 Thread francis picabia
On Mon, Oct 20, 2014 at 9:18 AM, Robert Moskowitz r...@htt-consult.com wrote: SInce this is about mail and spam, I thought this might be a good place to ask about nolisting: http://en.wikipedia.org/wiki/Nolisting I get ~ 7000 messages/day on my server, with ~70% getting tagged as spam.

Re: Slightly OT- nolisting

2014-10-20 Thread Dave Warren
On 2014-10-20 05:18, Robert Moskowitz wrote: SInce this is about mail and spam, I thought this might be a good place to ask about nolisting: http://en.wikipedia.org/wiki/Nolisting I get ~ 7000 messages/day on my server, with ~70% getting tagged as spam. I did some experimentation a few

Re: getting tons of SPAM

2014-10-20 Thread Benny Pedersen
On October 20, 2014 4:48:51 PM motty cruz motty.c...@gmail.com wrote: here are the RBLs I am using: reject_rbl_client b.barracudacentral.org, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net is there a way to block *.eu and *.link ? Would you listen to my

Re: getting tons of SPAM

2014-10-20 Thread Benny Pedersen
On October 20, 2014 4:51:35 PM Axb axb.li...@gmail.com wrote: use Postfix access tables (hash/pcre/regex) If he reject he will not listen to what he ask for, pointless

Re: getting tons of SPAM

2014-10-20 Thread motty cruz
Hello Benny, I tried to find a legitimate way to reject or drop spam email. I was getting tons of very spammy emails, with very low score. I take very serious your advise and suggestions. I joined this forum because I want to listen to experts. going through the configuration files I realize I

Re: dns: bad dns reply: Connection refused

2014-10-20 Thread Mark Martinec
2014-10-20 20:11, Reindl Harald wrote: [...] sorry, no, but what i face repeatly are messages like below in fact only if the machine has more than 1 dns in resolv.conf configure it to just use 127.0.0.1 and that won't happen Oct 19 09:04:42 caladan spamd[20546]: dns: no callback for id