Re: ViraLife

2021-01-27 Thread Rupert Gallagher
Note that gmail lets the first Received non public (it is the sender's machine). This is both a violation of the RFC and a tiny data breach. If you are ok with it, then whitelist the stinker. Original Message On Jan 28, 2021, 08:11, Rupert Gallagher < r...@protonmail.com>

Re: ViraLife

2021-01-27 Thread Rupert Gallagher
All Received must be public domains or literals by RFC. We reject such non compliant e-mails upfront, and I recommend you do the same. Original Message On Jan 27, 2021, 20:18, Loren Wilton < lwil...@earthlink.net> wrote: Has anyone been getting spams from "ViraLife"? They have

Re: [sa-list] Re: Help writing a rule

2021-01-27 Thread Dan Mahoney (Gushi)
e headers. There is already a rule like that in the base ruleset: https://ruleqa.spamassassin.org/20210127-r1885943-n/PDS_FROM_NAME_TO_DOMAIN/detail Jan 27 12:03:34.724 [29312] dbg: rules: ran header rule __PDS_FROM_NAME_TO_DOMAIN ==> got hit: "From: "GUSHI.ORG Administrator" Jan

Re: Help writing a rule

2021-01-27 Thread John Hardin
se ruleset: https://ruleqa.spamassassin.org/20210127-r1885943-n/PDS_FROM_NAME_TO_DOMAIN/detail Jan 27 12:03:34.724 [29312] dbg: rules: ran header rule __PDS_FROM_NAME_TO_DOMAIN ==> got hit: "From: "GUSHI.ORG Administrator" Jan 27 12:03:34.724 [29312] dbg: rul

Help writing a rule

2021-01-27 Thread Dan Mahoney (Gushi)
All, I'm noticing a pattern of email like: From: "GUSHI.ORG Administrator" To: y...@gushi.org Subject: Your mailbox has exceeded its quota Or some such nonsense. Now, DMARC and SPF and DKIM would be able to block the domain if they tried to spoof it in the From email address. But mail

ViraLife

2021-01-27 Thread Loren Wilton
Has anyone been getting spams from "ViraLife"? They have slowly started, one by one, hitting all of my email inboxes. It shows up about once a week as a "newletter". It claims to be from a legit email hosting company I know nothing about, and I certainly have never signed up for this spam.

Re: apache.org is blacklisted

2021-01-27 Thread John Hardin
On Wed, 27 Jan 2021, Matus UHLAR - fantomas wrote: On Wed, 27 Jan 2021, Benny Pedersen wrote: http://multirbl.valli.org/lookup/2a01%3A4f9%3Ac010%3A567c%3A%3A1.html i dont know how to handle this :=) On 26.01.21 17:43, John Hardin wrote: Only one lists it:

Re: apache.org is blacklisted

2021-01-27 Thread Antony Stone
On Wednesday 27 January 2021 at 17:00:49, RW wrote: > On Wed, 27 Jan 2021 13:40:36 +0100 > > Matus UHLAR - fantomas wrote: > > while we're here, was anyone able to get their page in english > > language? > > > > https://spfbl.net/en/project/ > > Yes, at the top right of the page you can select

Re: apache.org is blacklisted

2021-01-27 Thread RW
On Wed, 27 Jan 2021 13:40:36 +0100 Matus UHLAR - fantomas wrote: > while we're here, was anyone able to get their page in english > language? > > https://spfbl.net/en/project/ Yes, at the top right of the page you can select language. If you put your mouse pointer over it a menu appears - it

Re: apache.org is blacklisted

2021-01-27 Thread Dave Wreski
On 1/27/21 7:40 AM, Matus UHLAR - fantomas wrote: On Wed, 27 Jan 2021, Benny Pedersen wrote: http://multirbl.valli.org/lookup/2a01%3A4f9%3Ac010%3A567c%3A%3A1.html i dont know how to handle this :=) On 26.01.21 17:43, John Hardin wrote: Only one lists it:  

Re: apache.org is blacklisted

2021-01-27 Thread Matus UHLAR - fantomas
On Wed, 27 Jan 2021, Benny Pedersen wrote: http://multirbl.valli.org/lookup/2a01%3A4f9%3Ac010%3A567c%3A%3A1.html i dont know how to handle this :=) On 26.01.21 17:43, John Hardin wrote: Only one lists it: https://matrix.spfbl.net/en/3.227.148.255