Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread Fedor Piecka
Hello Bill I can show a few messages triggering the rule in our case but only for you to see the use of accented characters in Czech language. I'm unable to grant you a permission to upload them to masscheck corpus or to any other public/semipublic database. The messages contain no classified

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread @lbutlr
On 21 Mar 2019, at 14:27, John Hardin wrote: > On Thu, 21 Mar 2019, Martin Gregorie wrote: >> On Thu, 2019-03-21 at 12:20 -0700, John Hardin wrote: >>> >>> ...wrong thread? :) >> Unfortunately so. For some reason my mail reader's editor (I use >> Evolution) locked up on my first attempt to

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread John Hardin
On Thu, 21 Mar 2019, Martin Gregorie wrote: On Thu, 2019-03-21 at 12:20 -0700, John Hardin wrote: ...wrong thread? :) Unfortunately so. For some reason my mail reader's editor (I use Evolution) locked up on my first attempt to reply and when I got it to respond it again it sent the stupid

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread Martin Gregorie
On Thu, 2019-03-21 at 12:20 -0700, John Hardin wrote: > > ...wrong thread? :) > Unfortunately so. For some reason my mail reader's editor (I use Evolution) locked up on my first attempt to reply and when I got it to respond it again it sent the stupid message containing one blank line. Then I

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread John Hardin
On Thu, 21 Mar 2019, Martin Gregorie wrote: On Thu, 2019-03-21 at 09:23 -0700, John Hardin wrote: On Thu, 21 Mar 2019, Savvas Karagiannidis wrote: What should be considered is the message's language. All messages that were false positives had the following mime encoding (messages were

Re: Open source

2019-03-21 Thread Ralph Seichter
* RW: > You're missing the point. It may surprise you, but there is more than one "point" to having packages, and I can choose to make whatever point I damn well please. :-) -Ralph

Re: Open source (WAS: Spam rule for HTTP/HTTPS request to sender's root domain)

2019-03-21 Thread RW
On Thu, 21 Mar 2019 18:26:15 +0100 Ralph Seichter wrote: > * Mike Marynowski: > > > I was more asking if there is a good reason to build packages > > intended for local installation by email server operators and I > > don't think there really is. > > As a maintainer of several Gentoo Linux

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread RW
On Thu, 6 Dec 2018 09:15:59 -0800 (PST) John Hardin wrote: > On Wed, 5 Dec 2018, Grant Taylor wrote: > > Would __UNICODE_TEST_FR run / consume resources even if __LANG_FR > > evaluates to false? > > Yes, all the subrules get evaluated. There's no shortcutting because > a subrule may be used

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread Martin Gregorie
On Thu, 2019-03-21 at 09:23 -0700, John Hardin wrote: > On Thu, 21 Mar 2019, Savvas Karagiannidis wrote: > > > What should be considered is the message's language. All messages > > that were > > false positives had the following mime encoding (messages were > > actually in > > greek): > > > >

Re: Open source (WAS: Spam rule for HTTP/HTTPS request to sender's root domain)

2019-03-21 Thread Ralph Seichter
* Mike Marynowski: > I was more asking if there is a good reason to build packages intended > for local installation by email server operators and I don't think > there really is. As a maintainer of several Gentoo Linux ebuilds, I agree you should leave packaging to the various Linux

Re: White text + white background

2019-03-21 Thread Martin Gregorie

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread John Hardin
On Thu, 21 Mar 2019, Savvas Karagiannidis wrote: What should be considered is the message's language. All messages that were false positives had the following mime encoding (messages were actually in greek): Content-Type: text/[plain|html]; charset="windows-1253" or Content-Type:

Re: White text + white background

2019-03-21 Thread John Hardin
On Thu, 21 Mar 2019, Pedro David Marco wrote: Any idea about how to detect white text over white background in HTML? There are existing "low contrast" rules. "low contrast" *by itself* has historically had a poor-enough S/O that it's not a usable spam sign in isolation.

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread Bill Cole
On 21 Mar 2019, at 10:52, John Wilcock wrote: Le 21/03/2019 à 14:52, John Wilcock a écrit : Le 20/03/2019 à 20:19, Bill Cole a écrit : I've added these lines to the block that defines MIXED_ES which may help some sites: lang pl  score MIXED_ES  0.01 lang cz  score MIXED_ES  0.01   

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread Savvas Karagiannidis
Hi all, I'd like to thank you Bill for looking into this. I was a bit disappointed by the way the issue was handled at first on bugzilla. I must agree that the server's locale could be information to be considered but I don't think it solves the issue. I agree that this test is effective on

Re: Open source (WAS: Spam rule for HTTP/HTTPS request to sender's root domain)

2019-03-21 Thread Mike Marynowski
Here ya go ;) https://github.com/mikernet/HttpCheckDnsServer On 3/21/2019 5:42 AM, Tom Hendrikx wrote: On 20-03-19 19:56, Mike Marynowski wrote: A couple people asked about me posting the code/service so they could run it on their own systems but I'm currently leaning away from that. I don't

Re: White text + white background

2019-03-21 Thread Bill Cole
On 21 Mar 2019, at 5:32, Pedro David Marco wrote: Hi... Any idea about how to detect white text over white background in HTML? # grep -rC2 font_low_contrast /var/spamassassin/3.004002/updates_spamassassin_org /var/spamassassin/3.004002/updates_spamassassin_org/20_html_tests.cf-

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread John Wilcock
Le 21/03/2019 à 14:52, John Wilcock a écrit : Le 20/03/2019 à 20:19, Bill Cole a écrit : I've added these lines to the block that defines MIXED_ES which may help some sites: lang pl  score MIXED_ES  0.01 lang cz  score MIXED_ES  0.01 lang sk  score MIXED_ES  0.01 lang hr 

Re: Open source (WAS: Spam rule for HTTP/HTTPS request to sender's root domain)

2019-03-21 Thread Mike Marynowski
Perhaps I should have been clearer - I'm not against posting the code for any reason and I am planning to do that anyway in case anyone wants to look at it or chip in improvements and whatnot. I'm an active contributor on many open source projects and I have fully embraces OSS :) I was more

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread John Wilcock
Le 20/03/2019 à 20:19, Bill Cole a écrit : I've added these lines to the block that defines MIXED_ES which may help some sites:     lang pl  score MIXED_ES  0.01     lang cz  score MIXED_ES  0.01     lang sk  score MIXED_ES  0.01     lang hr  score MIXED_ES  0.01     lang el  score

Re: White text + white background

2019-03-21 Thread Giovanni Bechis
On 3/21/19 1:46 PM, Pedro David Marco wrote: > > >>On Thursday, March 21, 2019, 1:16:31 PM GMT+1, Martin Gregorie >> wrote: >>When I've seen white text used, its been set via a tag, i.e,  >> .. text .. >>or >> .. text .. >> >>Its easy enough to match either in a body rule. >

Re: No longer just embedded =9D characters in blackmail emails.

2019-03-21 Thread Bill Cole
On 20 Mar 2019, at 18:26, Benny Pedersen wrote: Bill Cole skrev den 2019-03-20 20:19: lang pl score MIXED_ES 0.01 lang cz score MIXED_ES 0.01 lang sk score MIXED_ES 0.01 lang hr score MIXED_ES 0.01 lang el score MIXED_ES 0.01 Those should get into the default

Re: White text + white background

2019-03-21 Thread Martin Gregorie
On Thu, 2019-03-21 at 09:32 +, Pedro David Marco wrote: > Hi... > > Any idea about how to detect white text over white background in > HTML? > When I've seen white text used, its been set via a tag, i.e, .. text .. or .. text .. Its easy enough to match either in a

Re: White text + white background

2019-03-21 Thread Pedro David Marco
>On Thursday, March 21, 2019, 1:16:31 PM GMT+1, Martin Gregorie wrote: >When I've seen white text used, its been set via a tag, i.e,  > .. text .. >or > .. text .. > >Its easy enough to match either in a body rule. Thanks Martin, the problem is that i want to detect

Open source (WAS: Spam rule for HTTP/HTTPS request to sender's root domain)

2019-03-21 Thread Tom Hendrikx
On 20-03-19 19:56, Mike Marynowski wrote: > > A couple people asked about me posting the code/service so they could > run it on their own systems but I'm currently leaning away from that. I > don't think there is any benefit to doing that instead of just utilizing > the centralized service. The

White text + white background

2019-03-21 Thread Pedro David Marco
Hi... Any idea about how to detect white text over white background in HTML? Thanks. -PedroD