Re: Blacklist for reply-to?

[Rupert Gallagher]

You need coffee...

Sent from ProtonMail Mobile

On Mon, Feb 19, 2018 at 02:09, Antony Stone 
 wrote:

> On Monday 19 February 2018 at 01:55:45, Rupert Gallagher wrote: > Question 
> time! You receive spam with a reply-to your own address. What do > you do? I 
> take it that this is now a rather different question that the one you 
> originally asked in this thread, where the reply-to address was clearly not 
> your own? > A: you blacklist your own address Is there any reason why inbound 
> mail should have your own address (and, by the way, do you mean address, or 
> domain?) as the reply-to? For some people yes, for others, no. Your 
> experience may not be standard. > B: you ask around to do A for you I'm not 
> sure what that means. > C: you ask for advice Good idea; let's see what other 
> replies you get. Antony. -- "I estimate there's a world market for about five 
> computers." - Thomas J Watson, Chairman of IBM Please reply to the list; 
> please *don't* CC me.

Re: Blacklist for reply-to?

[Rupert Gallagher]

Question time! You receive spam with a reply-to your own address. What do you 
do?

A: you blacklist your own address
B: you ask around to do A for you
C: you ask for advice

Sent from ProtonMail Mobile

On Sun, Feb 18, 2018 at 22:39, Kenneth Porter  wrote:

> --On Sunday, February 18, 2018 4:21 PM -0500 Rupert Gallagher wrote: > It is 
> not spam. You get it if you have an account with alibaba. Just > configure 
> it. These emails are addressed to many of my web-page-only addresses that 
> I've never used to sign up for anything. They're clearly unsolicited. 
> @protonmail.com>

Re: Blacklist for reply-to?

[Antony Stone]

On Monday 19 February 2018 at 01:55:45, Rupert Gallagher wrote:

> Question time! You receive spam with a reply-to your own address. What do
> you do?

I take it that this is now a rather different question that the one you 
originally asked in this thread, where the reply-to address was clearly not 
your own?

> A: you blacklist your own address

Is there any reason why inbound mail should have your own address (and, by the 
way, do you mean address, or domain?) as the reply-to?

For some people yes, for others, no.  Your experience may not be standard.

> B: you ask around to do A for you

I'm not sure what that means.

> C: you ask for advice

Good idea; let's see what other replies you get.


Antony.

-- 
"I estimate there's a world market for about five computers."

 - Thomas J Watson, Chairman of IBM

   Please reply to the list;
 please *don't* CC me.

Re: Blacklist for reply-to?

[Benny Pedersen]

Kenneth Porter skrev den 2018-02-18 22:39:


These emails are addressed to many of my web-page-only addresses that
I've never used to sign up for anything. They're clearly unsolicited.


blacklist_to *@spamtrap.example.org in replyto

force bayes learn on user in blacklist

maybe use blacklist_from aswell, i cant remember if one or both is 
needed

Re: Blacklist for reply-to?

[Benny Pedersen]

Antony Stone skrev den 2018-02-19 02:09:


C: you ask for advice

Good idea; let's see what other replies you get.


i hate mondays :=)

Blacklist for reply-to?

[Kenneth Porter]

Is there a blacklist for domains in the reply-to header?

I've noticed a lot of spam with no URL and mutating From but the reply-to 
domain is always aliyun dot com. I want to add a site-wide blacklist for 
that.

Re: Blacklist for reply-to?

[Kenneth Porter]

--On Sunday, February 18, 2018 4:21 PM -0500 Rupert Gallagher 
 wrote:



It is not spam. You get it if you have an account with alibaba. Just
configure it.


These emails are addressed to many of my web-page-only addresses that I've 
never used to sign up for anything. They're clearly unsolicited. 

Re: Blacklist for reply-to?

[Rupert Gallagher]

It is not spam. You get it if you have an account with alibaba. Just configure 
it.

Sent from ProtonMail Mobile

On Sun, Feb 18, 2018 at 21:06, Kenneth Porter  wrote:

> Is there a blacklist for domains in the reply-to header? I've noticed a lot 
> of spam with no URL and mutating From but the reply-to domain is always 
> aliyun dot com. I want to add a site-wide blacklist for that.

Re: Blacklist for reply-to?

[Rob McEwen]

On 2/18/2018 3:06 PM, Kenneth Porter wrote:

Is there a blacklist for domains in the reply-to header?
I've noticed a lot of spam with no URL and mutating From but the 
reply-to domain is always aliyun dot com. I want to add a site-wide 
blacklist for that. 



http://msbl.org

(I'm not associated with this. Also, it is very high quality and 
well-run! It should at least make a noticeable improvement, even if it 
doesn't catch all of them.)


--
Rob McEwen
https://www.invaluement.com
 

Re: problem with spamassassin for WIndows

[Groach]

Gianluca

1,  Your .PRE files are (by default) in:

%ProgramFiles(x86)%\JAM Software\SpamAssassin for Windows\etc\spamassassin

You will find the 'AutoLearnThreshold' plugin you need in v310.pre.
You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre  
(they may already be enabled - but if not just removed the #)


Then remove the loading of them from your Local.cf.

2,
To make them useful, your LOCAL.CF should read something like:

(Example)

   ifplugin Mail::SpamAssassin::Plugin::Shortcircuit

   #   default: strongly-whitelisted mails are *really* whitelisted
   now, if the
   #   shortcircuiting plugin is active, causing early exit to save CPU
   load.
   #   Uncomment to turn this on
   #
 shortcircuit USER_IN_WHITELIST   on
 shortcircuit USER_IN_DEF_WHITELIST   on

   endif # Mail::SpamAssassin::Plugin::Shortcircuit





On 18/02/2018 01:21, John Hardin wrote:

On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:


I’ve done this modifications in local.cf:

#  ifplugin

loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
loadplugin Mail::SpamAssassin::Plugin::Bayes

#ok_languages en it

ok_locales en

#   endif

And command spamassassin —lint doesn’t show any errors. Tomorrow I 
will continue
the debugging. It seems it doesn’t agree ifplugin-endif and also 
ok_languages


Three points:

(1) the syntax for "ifplugin" is:

ifplugin Mail::SpamAssassin::Plugin::whatever

It's a test to see whether that plugin is loaded, so that you can 
write plugin-dependent rules without generating lint errors when the 
plugin isn't loaded.


(2) "ifplugin" only accepts one plugin name.

(3) "loadplugin" commands should be in your v340.pre file, so that 
they get loaded before any rules.



If you added that "ifplugin" block to your config file, what exactly 
were you trying to achieve with that block?

Re: problem with spamassassin for WIndows

[Groach]

Keysteal, you will get your help for that on the hmailserver forum (where you 
are following the guide from).

This mail list is strictly spamassassin and not for the bespoke configuration 
you are trying with mysql.

(And  we have already seen that some Linux snobs will refuse you your right to 
use an os different to theirs and ask for help). 

Do not pursue this particular question on here. 

On 18 February 2018 16:23:22 GMT+00:00, Gianluca Furnarotto 
 wrote:
>Thanks Groach, and all guys that answered to me. This was very helpful.
>Next step for me is using Mysql to store learning spam. I followed a
>guide, but when I start sa-learn I have a strange windows error : "The
>program can't start because libmysql__.dll is missing from your
>computer. Try reinstalling
>the program to fix this problem"
>I find the .dll inside a perl folder, and I tried to copy everywhere,
>but nothing has changed.
>
>--  
>Gianluca Furnarotto  
>
>Da: Groach
>(mailto:groachmail-stopspammin...@yahoo.com)
>Rispondi: Groach
>(mailto:groachmail-stopspammin...@yahoo.com)
>Data: 18 febbraio 2018 at 11:57:44
>A: users@spamassassin.apache.org
>(mailto:users@spamassassin.apache.org)
>Oggetto: Re: problem with spamassassin for WIndows
>
>> Gianluca
>>  
>> 1, Your .PRE files are (by default) in:
>>  
>> %ProgramFiles(x86)%\JAM Software\SpamAssassin for
>Windows\etc\spamassassin
>>  
>> You will find the 'AutoLearnThreshold' plugin you need in v310.pre.
>> You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre
>(they may already be enabled - but if not just removed the #)
>>  
>> Then remove the loading of them from your Local.cf.
>>  
>> 2,
>> To make them useful, your LOCAL.CF should read something like:
>>  
>> (Example)
>>  
>> > ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
>> >  
>> > # default: strongly-whitelisted mails are *really* whitelisted now,
>if the
>> > # shortcircuiting plugin is active, causing early exit to save CPU
>load.
>> > # Uncomment to turn this on
>> > #
>> > shortcircuit USER_IN_WHITELIST on
>> > shortcircuit USER_IN_DEF_WHITELIST on
>> >  
>> > endif # Mail::SpamAssassin::Plugin::Shortcircuit
>>  
>>  
>>  
>>  
>> On 18/02/2018 01:21, John Hardin wrote:
>> > On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:
>> >  
>> > > I’ve done this modifications in local.cf:
>> > >  
>> > > # ifplugin
>> > >  
>> > > loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
>> > > loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
>> > > loadplugin Mail::SpamAssassin::Plugin::Bayes
>> > >  
>> > > #ok_languages en it
>> > >  
>> > > ok_locales en
>> > >  
>> > > # endif
>> > >  
>> > > And command spamassassin —lint doesn’t show any errors. Tomorrow
>I will continue
>> > > the debugging. It seems it doesn’t agree ifplugin-endif and also
>ok_languages
>> >  
>> > Three points:
>> >  
>> > (1) the syntax for "ifplugin" is:
>> >  
>> > ifplugin Mail::SpamAssassin::Plugin::whatever
>> >  
>> > It's a test to see whether that plugin is loaded, so that you can
>write plugin-dependent rules without generating lint errors when the
>plugin isn't loaded.
>> >  
>> > (2) "ifplugin" only accepts one plugin name.
>> >  
>> > (3) "loadplugin" commands should be in your v340.pre file, so that
>they get loaded before any rules.
>> >  
>> >  
>> > If you added that "ifplugin" block to your config file, what
>exactly were you trying to achieve with that block?
>> >  
>> >  
>>  

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

Re: problem with spamassassin for WIndows

[Gianluca Furnarotto]

Ok Groach, I perfectly understand. I already asked to Hmailserver forum about 
this issue. Thanks again.


Da: Groach 
(mailto:groachmail-stopspammin...@yahoo.com)
Rispondi: Groach 
(mailto:groachmail-stopspammin...@yahoo.com)
Data: 18 febbraio 2018 at 19:02:46
A: users@spamassassin.apache.org 
(mailto:users@spamassassin.apache.org)
Oggetto: Re: problem with spamassassin for WIndows

> Keysteal, you will get your help for that on the hmailserver forum (where you 
> are following the guide from).
>  
> This mail list is strictly spamassassin and not for the bespoke configuration 
> you are trying with mysql.
>  
> (And we have already seen that some Linux snobs will refuse you your right to 
> use an os different to theirs and ask for help).
>  
> Do not pursue this particular question on here.
>  
> On 18 February 2018 16:23:22 GMT+00:00, Gianluca Furnarotto 
>  wrote:
> >Thanks Groach, and all guys that answered to me. This was very helpful.
> >Next step for me is using Mysql to store learning spam. I followed a
> >guide, but when I start sa-learn I have a strange windows error : "The
> >program can't start because libmysql__.dll is missing from your
> >computer. Try reinstalling
> >the program to fix this problem"
> >I find the .dll inside a perl folder, and I tried to copy everywhere,
> >but nothing has changed.
> >
> >--
> >Gianluca Furnarotto
> >
> >Da: Groach
> >(mailto:groachmail-stopspammin...@yahoo.com)
> >Rispondi: Groach
> >(mailto:groachmail-stopspammin...@yahoo.com)
> >Data: 18 febbraio 2018 at 11:57:44
> >A: users@spamassassin.apache.org
> >(mailto:users@spamassassin.apache.org)
> >Oggetto: Re: problem with spamassassin for WIndows
> >
> >> Gianluca
> >>
> >> 1, Your .PRE files are (by default) in:
> >>
> >> %ProgramFiles(x86)%\JAM Software\SpamAssassin for
> >Windows\etc\spamassassin
> >>
> >> You will find the 'AutoLearnThreshold' plugin you need in v310.pre.
> >> You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre
> >(they may already be enabled - but if not just removed the #)
> >>
> >> Then remove the loading of them from your Local.cf.
> >>
> >> 2,
> >> To make them useful, your LOCAL.CF should read something like:
> >>
> >> (Example)
> >>
> >> > ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
> >> >
> >> > # default: strongly-whitelisted mails are *really* whitelisted now,
> >if the
> >> > # shortcircuiting plugin is active, causing early exit to save CPU
> >load.
> >> > # Uncomment to turn this on
> >> > #
> >> > shortcircuit USER_IN_WHITELIST on
> >> > shortcircuit USER_IN_DEF_WHITELIST on
> >> >
> >> > endif # Mail::SpamAssassin::Plugin::Shortcircuit
> >>
> >>
> >>
> >>
> >> On 18/02/2018 01:21, John Hardin wrote:
> >> > On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:
> >> >
> >> > > I’ve done this modifications in local.cf:
> >> > >
> >> > > # ifplugin
> >> > >
> >> > > loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
> >> > > loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
> >> > > loadplugin Mail::SpamAssassin::Plugin::Bayes
> >> > >
> >> > > #ok_languages en it
> >> > >
> >> > > ok_locales en
> >> > >
> >> > > # endif
> >> > >
> >> > > And command spamassassin —lint doesn’t show any errors. Tomorrow
> >I will continue
> >> > > the debugging. It seems it doesn’t agree ifplugin-endif and also
> >ok_languages
> >> >
> >> > Three points:
> >> >
> >> > (1) the syntax for "ifplugin" is:
> >> >
> >> > ifplugin Mail::SpamAssassin::Plugin::whatever
> >> >
> >> > It's a test to see whether that plugin is loaded, so that you can
> >write plugin-dependent rules without generating lint errors when the
> >plugin isn't loaded.
> >> >
> >> > (2) "ifplugin" only accepts one plugin name.
> >> >
> >> > (3) "loadplugin" commands should be in your v340.pre file, so that
> >they get loaded before any rules.
> >> >
> >> >
> >> > If you added that "ifplugin" block to your config file, what
> >exactly were you trying to achieve with that block?
> >> >
> >> >
> >>
>  
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity. 

Re: problem with spamassassin for WIndows

[Gianluca Furnarotto]

Thanks Groach, and all guys that answered to me. This was very helpful. Next 
step for me is using Mysql to store learning spam. I followed a guide, but when 
I start sa-learn I have a strange windows error : "The program can't start 
because libmysql__.dll is missing from your computer. Try reinstalling
the program to fix this problem"
I find the .dll inside a perl folder, and I tried to copy everywhere, but 
nothing has changed.

--  
Gianluca Furnarotto  

Da: Groach 
(mailto:groachmail-stopspammin...@yahoo.com)
Rispondi: Groach 
(mailto:groachmail-stopspammin...@yahoo.com)
Data: 18 febbraio 2018 at 11:57:44
A: users@spamassassin.apache.org 
(mailto:users@spamassassin.apache.org)
Oggetto: Re: problem with spamassassin for WIndows

> Gianluca
>  
> 1, Your .PRE files are (by default) in:
>  
> %ProgramFiles(x86)%\JAM Software\SpamAssassin for Windows\etc\spamassassin
>  
> You will find the 'AutoLearnThreshold' plugin you need in v310.pre.
> You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre (they 
> may already be enabled - but if not just removed the #)
>  
> Then remove the loading of them from your Local.cf.
>  
> 2,
> To make them useful, your LOCAL.CF should read something like:
>  
> (Example)
>  
> > ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
> >  
> > # default: strongly-whitelisted mails are *really* whitelisted now, if the
> > # shortcircuiting plugin is active, causing early exit to save CPU load.
> > # Uncomment to turn this on
> > #
> > shortcircuit USER_IN_WHITELIST on
> > shortcircuit USER_IN_DEF_WHITELIST on
> >  
> > endif # Mail::SpamAssassin::Plugin::Shortcircuit
>  
>  
>  
>  
> On 18/02/2018 01:21, John Hardin wrote:
> > On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:
> >  
> > > I’ve done this modifications in local.cf:
> > >  
> > > # ifplugin
> > >  
> > > loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
> > > loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
> > > loadplugin Mail::SpamAssassin::Plugin::Bayes
> > >  
> > > #ok_languages en it
> > >  
> > > ok_locales en
> > >  
> > > # endif
> > >  
> > > And command spamassassin —lint doesn’t show any errors. Tomorrow I will 
> > > continue
> > > the debugging. It seems it doesn’t agree ifplugin-endif and also 
> > > ok_languages
> >  
> > Three points:
> >  
> > (1) the syntax for "ifplugin" is:
> >  
> > ifplugin Mail::SpamAssassin::Plugin::whatever
> >  
> > It's a test to see whether that plugin is loaded, so that you can write 
> > plugin-dependent rules without generating lint errors when the plugin isn't 
> > loaded.
> >  
> > (2) "ifplugin" only accepts one plugin name.
> >  
> > (3) "loadplugin" commands should be in your v340.pre file, so that they get 
> > loaded before any rules.
> >  
> >  
> > If you added that "ifplugin" block to your config file, what exactly were 
> > you trying to achieve with that block?
> >  
> >  
>