sent mail IDs untrusted relays correctly; forwarded email does not ?

2015-06-26 Thread PGNd
On my local server, I have SA running from within postfix+amavisd My TRUST PATH works for 'sent-directly-to-me' mail. For 'forwarded-to-me' mail, it incorrectly IDs my own internal IPs as untrusted relays. How do I teach SA to correctly NOT id my own servers as untrusted? Details ... If I

Re: Barracuda / EmailReg.org protection racket? (OT, but help?)

2015-06-26 Thread Ted Mittelstaedt
Heh Heh Heh Heh Heh Since you and Charles have obviously never done this before why do you feel qualified to comment? Go ahead and not do this based on these logic castles you have built that are not founded on any experience of reality. Your customers will be suffering for a few days while

Rules needed...

2015-06-26 Thread Alex Regan
Hi, I have one system with greylisting enabled and another that hasn't yet been enabled. On the system without it, I'm receiving a ton of random spam that hits bayes99 but pretty much nothing else. http://pastebin.com/FzUkEvRp It all seems to be related to the same botnet because it has

Re: Rules needed...

2015-06-26 Thread Ted Mittelstaedt
Are you running a centralized Bayes with some honeypot addresses feeding it? A search of your messages log should give you plenty of bogus email addresses that the botnet has been probing for on your system. Pick some of the obvious ones and set them up as feeders to Bays and that should take

Re: Rules needed...

2015-06-26 Thread Benny Pedersen
Alex Regan skrev den 2015-06-26 18:33: http://pastebin.com/FzUkEvRp blacklist_from *@*.allisonarctictrips.com spf-pass take responselily

Re: Rules needed...

2015-06-26 Thread David Jones
From: Benny Pedersen m...@junc.eu Sent: Friday, June 26, 2015 11:45 AM To: users@spamassassin.apache.org Subject: Re: Rules needed... Alex Regan skrev den 2015-06-26 18:33: http://pastebin.com/FzUkEvRp blacklist_from *@*.allisonarctictrips.com spf-pass take responselily That IP is on a ton

Re: Rules needed...

2015-06-26 Thread Bill Cole
On 26 Jun 2015, at 12:33, Alex Regan wrote: Hi, I have one system with greylisting enabled and another that hasn't yet been enabled. On the system without it, I'm receiving a ton of random spam that hits bayes99 but pretty much nothing else. http://pastebin.com/FzUkEvRp It all seems to be

Re: Rules needed...

2015-06-26 Thread Dave Wreski
On 06/26/2015 12:45 PM, Benny Pedersen wrote: Alex Regan skrev den 2015-06-26 18:33: http://pastebin.com/FzUkEvRp blacklist_from *@*.allisonarctictrips.com spf-pass take responselily Yes, after it's received, there are a ton of things that could be done to block it (including my local

Re: Rules needed...

2015-06-26 Thread Benny Pedersen
On June 26, 2015 8:00:22 PM Dave Wreski dwre...@guardiandigital.com wrote: On 06/26/2015 12:45 PM, Benny Pedersen wrote: Alex Regan skrev den 2015-06-26 18:33: http://pastebin.com/FzUkEvRp blacklist_from *@*.allisonarctictrips.com spf-pass take responselily Yes, after it's received,

Re: sent mail IDs untrusted relays correctly; forwarded email does not ?

2015-06-26 Thread RW
On Fri, 26 Jun 2015 13:34:59 -0700 PGNd wrote: On Fri, Jun 26, 2015, at 01:23 PM, RW wrote: They shouldn't be trusted unless there is a chain of trust. They don't matter anyway since they are from the original relay before the email was forwarded. I thought that 'chain of trust' was

Re: sent mail IDs untrusted relays correctly; forwarded email does not ?

2015-06-26 Thread RW
On Fri, 26 Jun 2015 09:36:56 -0700 PGNd wrote: On my local server, I have SA running from within postfix+amavisd My TRUST PATH works for 'sent-directly-to-me' mail. For 'forwarded-to-me' mail, it incorrectly IDs my own internal IPs as untrusted relays. How do I teach SA to correctly NOT

Re: sent mail IDs untrusted relays correctly; forwarded email does not ?

2015-06-26 Thread PGNd
On Fri, Jun 26, 2015, at 01:23 PM, RW wrote: They shouldn't be trusted unless there is a chain of trust. They don't matter anyway since they are from the original relay before the email was forwarded. I thought that 'chain of trust' was established by their inclusion in the

Re: Rules needed...

2015-06-26 Thread Ted Mittelstaedt
On 6/26/2015 10:53 AM, Dave Wreski wrote: On 06/26/2015 12:45 PM, Benny Pedersen wrote: Alex Regan skrev den 2015-06-26 18:33: http://pastebin.com/FzUkEvRp blacklist_from *@*.allisonarctictrips.com spf-pass take responselily Yes, after it's received, there are a ton of things that

Re: sent mail IDs untrusted relays correctly; forwarded email does not ?

2015-06-26 Thread PGNd
On Fri, Jun 26, 2015, at 02:01 PM, RW wrote: The received headers are parsed top to bottom; once an untrusted server is identified the chain of trust is broken and nothing below that can be trusted. Spammers can and do forge headers. Got it. Which leads back to the question you raised ...

Re: Barracuda / EmailReg.org protection racket? (OT, but help?)

2015-06-26 Thread Reindl Harald
Am 26.06.2015 um 18:43 schrieb Ted Mittelstaedt: Heh Heh Heh Heh Heh Since you and Charles have obviously never done this before why do you feel qualified to comment? *lol* Go ahead and not do this based on these logic castles you have built that are not founded on any experience of