Re: Question about whitelisting of naadac.org

On Wed, 11 Aug 2021, Lukasz Maik wrote: Hi All, The company naadac.org is experiencing problems with their e-mails being marked as SPAM, when they are putting link to their domain www.naadac.org in the signature of their mails. Is it possible to whitelist this domain/link in your SPAM

Re: spamassassin 3.4.5 wide chars

On 2021-08-11 at 22:03:24 UTC-0400 (Thu, 12 Aug 2021 04:03:24 +0200) Benny Pedersen is rumored to have said: > https://bugs.gentoo.org/807781 > > is it solved in 3.4.6 ? That's not a SA bug report. It's a Gentoo bug report. Fix your rules. -- Bill Cole b...@scconsult.com or

Re: Leaning toothpick syndrom (was: KAM_SOMETLD_ARE_BAD_TLD false positive)

As a note, I sometimes make my rules harder to read on purpose to dissuade bad actors from trying to unwind them. On Wed, Aug 11, 2021, 11:21 Kenneth Porter wrote: > On 8/11/2021 8:05 AM, Kenneth Porter wrote: > > > > BTW, does SA permit use of Perl-style regex delimiters to avoid > > leaning

spamassassin 3.4.5 wide chars

https://bugs.gentoo.org/807781 is it solved in 3.4.6 ?

Re: Question about whitelisting of naadac.org

--On Wednesday, August 11, 2021 8:57 PM + Lukasz Maik wrote: The company naadac.org is experiencing problems with their e-mails being marked as SPAM, when they are putting link to their domain www.naadac.org in the signature of their mails. Is it possible to

Leaning toothpick syndrom (was: KAM_SOMETLD_ARE_BAD_TLD false positive)

On 8/11/2021 8:05 AM, Kenneth Porter wrote: BTW, does SA permit use of Perl-style regex delimiters to avoid leaning toothpick syndrome? https://en.wikipedia.org/wiki/Leaning_toothpick_syndrome Answering my own question, I see it used in this rule: uri    __IMGUR_IMG

Re: KAM_SOMETLD_ARE_BAD_TLD false positive

On 8/11/2021 7:39 AM, Jared Hall wrote: *Maybe* a little more refinement could prevent it picking  up .hidden folders that have a BAD_TLD name. /[A-z0-9]+\.(pw|stream|trade|press|top|date|guru|casa|online|cam|shop|club|bar)(\s|$|\/)/i The CVS/Kodak uri would still fail on this pattern,

Re: KAM_SOMETLD_ARE_BAD_TLD false positive

Kenneth Porter wrote: uri  __KAM_SOMETLD_ARE_BAD_TLD_URI /\.(pw|stream|trade|press|top|date|guru|casa|online|cam|shop|club|bar)($|\/)/i I have a client whose NVR writes its archived video spools to a .cam folder on their server.  Heaven forbid ".well-known" ever becomes a TLD :)