Re: OT: Trigger words in email addresses?

2024-04-08 Thread Antony Stone
On Monday 08 April 2024 at 05:15:58, Grant Taylor via users wrote: > Below is my opinion, it's worth everything you paid for it. But I do > suggest you read it and think about it for a few minutes. For what it's worth, I thoroughly agree with these opinions. - don't alienate people by sending

Re: symlinking config files

2024-01-05 Thread Antony Stone
On Friday 05 January 2024 at 19:53:00, Thomas Krichel wrote: > I'm running version 4.0.0-8 on debian testing. This is for > Mailman. I have a script that creates a welcomelist for all my > Mailman members. I include it via a symlink. > Clearly spamassassin follows the symlink and reads

Re: Beginner Setting up Spam Assassin

2023-12-30 Thread Antony Stone
On Saturday 30 December 2023 at 11:54:33, FalconChristopher wrote: > The comment by Michael Grant ? Yes, the comment I quoted below. He is suggesting how you can deal with this problematic user you want to "eliminate spam coming in from". > On 12/30/2023 5:52 AM, An

Re: Beginner Setting up Spam Assassin

2023-12-30 Thread Antony Stone
On Saturday 30 December 2023 at 11:48:30, FalconChristopher wrote: > Hi, can I not ask how to set up Spam Assassin in this mailing group it > is a group for Spam Assassin. That comment was a recommendation of how you can achieve what you want to. > On 12/30/2023 4:30 AM, Michael Grant wrote: >

Re: external API request

2023-10-27 Thread Antony Stone
On Friday 27 October 2023 at 17:07:41, John Hardin wrote: > On Fri, 27 Oct 2023, Antony Stone wrote: > > On Friday 27 October 2023 at 16:56:36, DEMBLANS Mathieu wrote: > >> Hi, > >> Anyone know if there is a way to request an external API throught

Re: external API request

2023-10-27 Thread Antony Stone
On Friday 27 October 2023 at 16:56:36, DEMBLANS Mathieu wrote: > Hi, > Anyone know if there is a way to request an external API throught a > spamsassassin plugin ? It will be to search an URL extracted by SA from a > body of a mail and check if it's referenced with an API request on an > external

Re: My apologies

2023-08-02 Thread Antony Stone
On Wednesday 02 August 2023 at 21:39:31, Thomas Cameron via users wrote: > I was notified privately that Reindl Harald is blocked on this list. I > replied to him and accidentally polluted the list with more of his > toxicity. I apologize, and I've blocked him on my mail server, as well. We've

Re: Install plugins into embedded spamassassin

2023-02-25 Thread Antony Stone
On Saturday 25 February 2023 at 15:30:13, hg user wrote: > Hi, > I'd like to install at least one plugin in my embedded spamassassin, > installed inside Zimbra. > I'm a bit afraid of breaking stuff, about missing dependencies and so on. > > I'm on SA 3.4.5 and - as a test - I'd like to install

Re: [ANNOUNCE] Apache SpamAssassin 4.0.0 available

2022-12-20 Thread Antony Stone
On Tuesday 20 December 2022 at 13:13:20, Benny Pedersen wrote: > there is 2 kind of people, one that do understand jokes, and the other In general I find that it helps greatly if the person telling a joke is clear that that is what they are doing. In speech / face-to-face situations this can

Re: Txrep, add-addr-to-whitelist

2021-12-16 Thread Antony Stone
On Thursday 16 December 2021 at 21:43:04, Peter wrote: > Thanks, I hadn't thought about that. > > I am curious though, I normall hit Reply rather than Reply to All, and with > your email Reply just uses your own address, That, I find strange. For me, selecting my own reply on the list, and

Re: Txrep, add-addr-to-whitelist

2021-12-16 Thread Antony Stone
On Thursday 16 December 2021 at 21:21:28, Peter wrote: > I was thinking that replies would show up here. > Perhaps I should create an account on a mail server without RBL blocking? Either that, or (preferably) stop your email client from enforcing a Reply-To address which is different from the

Re: problems updating when using a cron job on debian 11

2021-09-03 Thread Antony Stone
On Friday 03 September 2021 at 11:23:19, Jean-François Bachelet wrote: > Le 03/09/2021 à 09:11, Bob Proulx a écrit : > > Jean-François Bachelet wrote: > > > >> user create > >> 'useradd -u 5001 -g spamd -s /sbin/nologin -d /var/lib/spamassassin > >> spamd' mkdir /var/lib/spamassassin > >> chown

Re: problems updating when using a cron job on debian 11

2021-09-02 Thread Antony Stone
On Thursday 02 September 2021 at 12:03:22, Jean-François Bachelet wrote: > Hello folks ^^) > > > I've installed the latest spamassassin version on a new Debian 11 server How did you install it? Antony. -- Schrödinger's rule of data integrity: the condition of any backup is unknown until a

Re: Customise hostname shown in X-Spam-Checker-Version?

2021-07-31 Thread Antony Stone
On Saturday 31 July 2021 at 21:02:12, David Bürgin wrote: > > add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on > > mail.mydomain.ch > > X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on > > mail.mydomain.ch > > A final remark: This solution has a side effect. It

Re: Customise hostname shown in X-Spam-Checker-Version?

2021-07-30 Thread Antony Stone
On Friday 30 July 2021 at 21:13:43, David Bürgin wrote: > Is there a way to customise the hostname shown in the line: > > X-Spam-Checker-Version: No. https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Conf.html #BASIC-MESSAGE-TAGGING-OPTIONS "Here are some examples (these are

Re: Identifying Amazon hosts...

2021-07-28 Thread Antony Stone
On Wednesday 28 July 2021 at 19:51:49, Pedro David Marco wrote: > Hi! > i have spam with this header: > > Received: from a48-115.smtp-out.amazonses.com (HELO > a48-115.smtp-out.amazonses.com) (54.240.48.115) > > Is there any way, based on its fqdn, to know whether an Amazon smtp host is >

Re: SPAM scanned twice

2021-07-12 Thread Antony Stone
On Monday 12 July 2021 at 20:07:16, Joe Acquisto-j4 wrote: > SpamAssassin 3.4.5 (2021-03-20) on Suse Leap 15.2 (their distro IIRC) > > Noticed that mail marked as SPAM was scanned again by SA after it had been > "disposed" as an attachment. > > I uncommented "report_safe 0" and did a restart

Re: My 10 years old domain have a bad TLD

2021-05-05 Thread Antony Stone
On Wednesday 05 May 2021 at 12:15:41, Denis Chenu wrote: > Hi Dominic, > > Le 03/05/2021 à 09:28, Dominic Raferd a écrit : > > I have another personal rule which adds +6 for 'unusual' domains - > > including .pro - so your chance of getting an email through to my users > > is zero (sorry),

Re: Why does SA add SPF check fail to this message?

2021-04-24 Thread Antony Stone
On Saturday 24 April 2021 at 12:22:15, Yuri wrote: > All messages from the FreeBSD mailing list are labeled as 'SPF check fail'. I would firstly observe that you (or whomever runs mail0.{redacted}.com) are running SpamAssassin version 3.3.1 (eleven years old now), so therefore i wonder how

Re: How do you set nomail for the List?

2021-04-20 Thread Antony Stone
On Tuesday 20 April 2021 at 23:27:14, Bob Proulx wrote: > I was not aware that this mailing list requires one to be subscribed > to post to it. Does it? It's not necessary on most technical mailing > lists. I would in fact say the exact opposite: most mailing lists do require subscription in

Re: How do you set nomail for the List?

2021-04-20 Thread Antony Stone
On Tuesday 20 April 2021 at 22:54:29, RW wrote: > On Tue, 20 Apr 2021 10:21:57 -0600 Bob Proulx wrote: > > Don Saklad wrote: > > > How do you set nomail for the List? > > > > To unsubscribe send an email message to this address. Followed by a > > pre-mangled address for the web archive readers

Re: Spoofed amazon order email

2021-04-16 Thread Antony Stone
On Friday 16 April 2021 at 17:26:40, Dave Wreski wrote: > > And how the hell is google letting this crap flow out of its email > > service, anyway? > > Because they're in the email business, not the email security business. I would add that Google do spam filtering on *inbound* mail, because

Re: Spoofed amazon order email

2021-04-16 Thread Antony Stone
On Friday 16 April 2021 at 17:10:14, Steve Dondley wrote: > First, thanks to everyone on the list how has given me a hand over the > past couple of weeks as I get my "sea legs" with spamassassin. It's > working well for me now but I obviously still have more to learn. > > For one, I'm still

Re: Is pyzor recommended by folks on this list?

2021-04-11 Thread Antony Stone
On Sunday 11 April 2021 at 23:27:26, Benny Pedersen wrote: > On 2021-04-11 23:20, RW wrote: > > > > I don't see the advantage. You might just as well submit to the shared > > server so everyone benefits. > > > > Pyzor is not a realistic substitute for Bayes. > > and centralizion on prolems is

Re: Problem installing sa on my pi 3b+

2021-04-07 Thread Antony Stone
On Wednesday 07 April 2021 at 12:05:42, spamassas...@mach2.franken.de wrote: > Ok so it seems I cant do anything to get it running on my side. > Funny enough that I use the official raspian which I kept up to date > with 'sudo apt-get update' > and now the 'sudo apt-get install that claims to use

Re: How do I efficiently share a database with all users?

2021-03-11 Thread Antony Stone
On Thursday 11 March 2021 at 18:42:59, Steve Dondley wrote: > I have a few different mail servers. I harvest mail from the servers and > periodically sort them into ham/spam folders and then share the sorted > mail back out to the servers > How can I run sa-learn once on the system and then

Re: SA's bayes with the Redis backend?

2021-02-11 Thread Antony Stone
On Thursday 11 February 2021 at 17:21:41, deano-spamassas...@areyes.com wrote: > Is there an easy/efficient way of converting an existing mariadb bayes > database to redis? > > Perhaps "sa-learn --backup", set up redis, then restore?

Re: apache.org is blacklisted

2021-01-27 Thread Antony Stone
On Wednesday 27 January 2021 at 17:00:49, RW wrote: > On Wed, 27 Jan 2021 13:40:36 +0100 > > Matus UHLAR - fantomas wrote: > > while we're here, was anyone able to get their page in english > > language? > > > > https://spfbl.net/en/project/ > > Yes, at the top right of the page you can select

Re: What does that rule mean "SUBJ_OBFU_PUNCT FEW"

2021-01-13 Thread Antony Stone
On Wednesday 13 January 2021 at 16:57:55, Philipp Ewald wrote: > Hello, > > we try to deliver mails to GMX/WEB but we got frequency blocked because > "ro-reply@ Mails" hits following rules: Sorry, but what do you mean by "ro-reply@ Mails"? > SUBJ_OBFU_PUNCT_FEW -> Possible

Re: UNSUBSCRIBE

2020-12-23 Thread Antony Stone
On Wednesday 23 December 2020 at 22:29:50, Alan wrote: > On 2020-12-23 16:22, Richard Ozer wrote: > > To unsubscribe, e-mail: users-unsubscr...@netbeans.apache.org > > For additional commands, e-mail: users-h...@netbeans.apache.org >

Re: What can one do abut outlook.com?

2020-10-25 Thread Antony Stone
On Sunday 25 October 2020 at 17:05:26, Marc Roos wrote: > Google, Amazon and Microsoft have billions of cash. It is indeed a > wonder how they are not spending it on outgoing mail detection. Why do they need to? Customers use their services anyway, and are either: a) spammers, in which case

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Antony Stone
On Sunday 11 October 2020 at 16:28:12, Rick Macdougall wrote: > Hi, > > Are you running sa-learn as the same user that spamd runs as ? > > Running sa-learn as root won't help the scores. I've been aware of this advice / requirement almost since I started using SA. However, I've never been

Re: Spamassassin Email Alert

2020-09-02 Thread Antony Stone
On Wednesday 02 September 2020 at 12:35:15, KADAM, SIDDHESH wrote: > Hi, > > I want to send a mail to local admin If any mail body matches a content > of a specific words. Have you considered https://www.mailscanner.info/ ? Regards, Antony. -- Pavlov is in the pub enjoying a pint. The

Re: Constructive solution to the blacklist thread

2020-07-23 Thread Antony Stone
On Thursday 23 July 2020 at 22:44:51, Michael Orlitzky wrote: > The Apache foundation has some cash laying around. Make whatever wording > changes you like, but **at the same time**, donate a meaningful amount > of money to a cause like the ACLU or the defense/medical funds for the > protestors.

Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-23 Thread Antony Stone
On Thursday 23 July 2020 at 04:36:41, Olivier wrote: > I am wondering what grey list should be renamed... Why - has the zombie population started complaining about racial slurs? Antony. -- "The future is already here. It's just not evenly distributed yet." - William Gibson

Re: IMPORTANT NOTICE: Rules referencing WHITELIST or BLACKLIST in process of being Renamed

2020-07-19 Thread Antony Stone
On Sunday 19 July 2020 at 19:56:34, Kevin A. McGrail wrote: > We only publish one set of rules so you will see that become welcome > instead of white. My feeling on this is that such a breaking change requires a fairly lengthy backward-compatible transition period (with appropriate warning

Re: Screwed-up scoring

2020-07-19 Thread Antony Stone
On Sunday 19 July 2020 at 17:44:27, Linkcheck wrote: > Thanks to those responsible for screwing up the scoring of my > spamassassin installation. It's been working well for years but now my > changes to scoring have been cancelled due to renaming > whitelist/blacklist to whatever. > > I noticed

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-17 Thread Antony Stone
On Friday 17 July 2020 at 19:17:42, Ted Mittelstaedt wrote: > this entire "movement" about changing language boiled down is nothing more > than yet another example of white people deciding what is best for people of > color - like has been going on for centuries. I applaud your comment, but I

Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-17 Thread Antony Stone
ou displayed in the comment below is not in my opinion acceptable on a mailing list. > yes, sums your type up rather nicely, desperate for approval and > pathetic... > > On 17/07/2020 18:44, Antony Stone wrote: > > On Friday 17 July 2020 at 00:58:05, Noel Butler wrote: > >> I di

Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-17 Thread Antony Stone
On Friday 17 July 2020 at 00:58:05, Noel Butler wrote: > I did 24 hours back wanker, but just for you, I'll continue it I request that anyone with this attitude to the list, and to people on it, be removed. Antony. -- "There is no reason for any individual to have a computer in their home."

Re: spamhaus enabled by default

2020-07-14 Thread Antony Stone
On Tuesday 14 July 2020 at 23:23:29, Martin Gregorie wrote: > On Tue, 2020-07-14 at 22:59 +0200, Antony Stone wrote: > > On Tuesday 14 July 2020 at 21:46:11, Martin Gregorie wrote: > > > This info should include lots of black (hashmarks, asterisks etc). > > &

Re: spamhaus enabled by default

2020-07-14 Thread Antony Stone
On Tuesday 14 July 2020 at 21:46:11, Martin Gregorie wrote: > This info should include lots of black (hashmarks, asterisks etc). You should be careful of the language you use these days, especially on this list. Yes, I am being sarcastic about what you wrote, but I'm also being serious about

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-11 Thread Antony Stone
On Friday 10 July 2020 at 14:37:09, Mauricio Tavares wrote: > How long until we have to rename electrical and mechanical > connectors? Shortly after the astrophysicists have found an inoffensive term for black holes, various military agencies have stopped running black ops, all the

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-11 Thread Antony Stone
On Saturday 11 July 2020 at 12:42:43, hospice admin wrote: > Concentrating on the technical issues below ... > > I think there's a fairly wide consensus among those posting on this thread, > myself included, that this does not 'make the technology better'. > > That's the point I was attempting

Re: Really simple setup guide

2020-07-10 Thread Antony Stone
On Friday 10 July 2020 at 11:02:23, Matthew Broadhead wrote: > i tried to set up bayes training before but i feel that i was unsuccessful. It would be helpful to know what gives you that feeling. How are you training and how are you testing? > is there a definitive guide on setting this up on

Re: Technically not spam

2020-05-29 Thread Antony Stone
On Friday 29 May 2020 at 17:40:42, @lbutlr wrote: > How do people deal with lists that a user subscribed to that require > logging in to an account to unsubscribe? Well, as you say in your Subject, this isn't spam; it's just email that the user asked for but has decided they no longer want. >

Re: Is PDS_TONAME_EQ_TOLOCAL_SHORT new?

2019-10-30 Thread Antony Stone
On Wednesday 30 October 2019 at 20:23:37, RW wrote: > On Wed, 30 Oct 2019 14:09:11 -0400 > > Mark London wrote: > > Is PDS_TONAME_EQ_TOLOCAL_SHORT new? I see it hitting real emails > > here, but hitting no spam emails. Thanks. > > It's one of several rules based on __PDS_TONAME_EQ_TOLOCAL,

Re: announcement about invaluement (or more like a tease?)

2019-08-26 Thread Antony Stone
On Monday 26 August 2019 at 13:29:45, Axb wrote: > On 8/26/19 3:24 AM, Rob McEwen wrote: > > announcement about invaluement (or more like a tease?) > > > > https://www.linkedin.com/feed/update/urn:li:activity:6571558988201148416/ > > I don't do linkedin - what is it? Social networking for

Re: Zero-width rules?

2019-06-28 Thread Antony Stone
On Friday 28 June 2019 at 19:26:32, John Hardin wrote: > On Fri, 28 Jun 2019, Bill Cole wrote: > > > > Also FWIW: ZWNJ and ZWJ appear chronically and prolifically in messages > > sent by a small fraction of entirely legitimate mailing lists. I expect > > to start seeing ZWS characters in opt-in

Re: Rules for invisible div and 0pt font?

2019-06-17 Thread Antony Stone
On Monday 17 June 2019 at 21:14:36, Amir Caspi wrote: > Hi all, > > In reviewing today's FNs I came across the following spample: > https://pastebin.com/9QQVwUY6 > > There is a div here with display:none, as well as font-size:0px. The > spample hits HTML_FONT_LOW_CONTRAST but does not appear

Re: Meta for bogus MIME with DKIM valid?

2019-06-13 Thread Antony Stone
On Thursday 13 June 2019 at 17:45:02, Joseph Brennan wrote: > We've been refusing mail based on this stupid error for a year and a half > (local rule) and no false positive has ever come to attention. The volume > averages about 50,000 a day here. What's that as a percentage of total inbound

Re: Spam rule for HTTP/HTTPS request to sender's root domain

2019-03-13 Thread Antony Stone
On Wednesday 13 March 2019 at 19:21:47, Jari Fredriksson wrote: > What would it result for this: > > I have a couple domains that do not have any services for the root domain > name. How ever, the server the A points do have a web server that acts as > a reverse proxy for many subdomains that

Re: Spam rule for HTTP/HTTPS request to sender's root domain

2019-03-01 Thread Antony Stone
On Friday 01 March 2019 at 17:37:18, Mike Marynowski wrote: > Quick sampling of 10 emails: 8 of them have valid A records on the email > domain. I presumed SpamAssassin was already doing simple checks like that. That doesn't sound like a good idea to me (presuming, I mean). Antony. -- "The

Re: Spam rule for HTTP/HTTPS request to sender's root domain

2019-02-28 Thread Antony Stone
On Thursday 28 February 2019 at 20:33:42, Mike Marynowski wrote: > But scconsult.com does in fact have a website so I'm not sure what you > mean. This method checks the *root* domain, not the subdomain. How do you identify the root domain, given an email address? For example, for many years in

Re: Spam rule for HTTP/HTTPS request to sender's root domain

2019-02-28 Thread Antony Stone
On Thursday 28 February 2019 at 20:25:36, Bill Cole wrote: > On 28 Feb 2019, at 13:43, Mike Marynowski wrote: > > On 2/28/2019 12:41 PM, Bill Cole wrote: > >> You should probably put the envelope sender (i.e. the SA > >> "EnvelopeFrom" pseudo-header) into that list, maybe even first. That > >>

Re: Spam rule for HTTP/HTTPS request to sender's root domain

2019-02-28 Thread Antony Stone
On Thursday 28 February 2019 at 17:14:04, Ralph Seichter wrote: > * Grant Taylor: > > Why would you do it per email? I would think that you would do the > > test and cache the results for some amount of time. > > I would not do it at all, caching or no caching. Personally, I don't see > a

Re: spamassassin trunk

2019-02-28 Thread Antony Stone
On Thursday 28 February 2019 at 15:26:57, Benny Pedersen wrote: > Antony Stone skrev den 2019-02-28 14:56: > > On Thursday 28 February 2019 at 14:44:05, Benny Pedersen wrote: > >> where is it ? > > > > A Google search for "spamassassin trunk" gives me

Re: spamassassin trunk

2019-02-28 Thread Antony Stone
On Thursday 28 February 2019 at 14:44:05, Benny Pedersen wrote: > where is it ? A Google search for "spamassassin trunk" gives me https://wiki.apache.org/spamassassin/DownloadFromSvn as the first result, and following the "Trunk" link there takes me to

Re: Semi Off-topic: VFEMail destroyed

2019-02-22 Thread Antony Stone
On Friday 22 February 2019 at 21:44:07, Alex Woick wrote: > In the end, it comes back to trust. Don't employ people you don't trust. How do you know you don't trust them until you find out you can't? Antony. -- The truth is rarely pure, and never simple. - Oscar Wilde

Re: mail with HUNDREDS of links not being checked

2019-01-27 Thread Antony Stone
On Sunday 27 January 2019 at 12:20:02, LegendGamesMaster wrote: > Hi Folks - i've tried to post this several times with no success. Have you had any indication of what the failure is (eg: any error messages, bounces back to you), or have you simply not seen your mail appear on the list? > 1)

Re: PLEASE UNSUBSCRIBE ME!

2019-01-15 Thread Antony Stone
On Tuesday 15 January 2019 at 21:08:17, RALPH HAUSER wrote: > SOMEONE PLEASE UNSUBSCRIBE ME FROM THIS! I DONT KNOW WHAT THAT IS! Thank > you! PLEASE PLEASE! As I replied to someone only on Sunday... See the headers of every message on this list: list-help:

Re: unsubscribe me please.

2019-01-13 Thread Antony Stone
On Sunday 13 January 2019 at 22:03:58, Esteban L wrote: > unsubscribe please See the headers of every message on this list: list-help: list-unsubscribe: List-Post:

Bayes

2018-10-15 Thread Antony Stone
Hi. I thought http://xkcd.org/2059 was appropriate to highlight on this list :) Antony. -- "It would appear we have reached the limits of what it is possible to achieve with computer technology, although one should be careful with such statements; they tend to sound pretty silly in five

Re: ip address reputation

2018-10-08 Thread Antony Stone
On Monday 08 October 2018 at 12:14:17, Gokan Atmaca wrote: > How can I query the reputation of Spamassassin ip address? Please explain the question more fully - I do not know what you are trying to do. Which IP address are you trying to look up, and what do you mean by "reputation"? Antony.

Re: spamassassin

2018-10-08 Thread Antony Stone
On Monday 08 October 2018 at 12:12:22, Gokan Atmaca wrote: > Hello > > I'm querying the SPF record. However, the SPF record is either present > or absent. Yes, it is a TXT record in the DNS entry for the domain you're looking up. > I want to query the MX and IP address of the SPF record. You

Re: Bitcoin update

2018-10-05 Thread Antony Stone
On Friday 05 October 2018 at 23:26:12, Rupert Gallagher wrote: > > https://pastebin.com/TRD7FzRQ > > > > I have a sample here > > There are at least three reasons to reject that e-mail upfront, with no > need to parse its body. Hints might be appreciated for the uninitiated. Antony. PS:

Re: Rule for multiple paragraphs

2018-09-17 Thread Antony Stone
On Monday 17 September 2018 at 17:29:48, Pedro David Marco wrote: > Hi! > is there any trick to make a rule work along different body paragraphs?? or > maybe the only way is via plugins... Give us a bit more of a clue what you are trying / hoping to do? In what way do you want to identify

Re: Non-ascii subjects with images

2018-09-03 Thread Antony Stone
On Monday 03 September 2018 at 18:40:44, Pedro David Marco wrote: > On Sunday, September 2, 2018, 6:02:55 AM GMT+2, Bill Cole wrote: > > SA "header" rules match against decoded headers, not the Base64 or QP > > encoded text. > > Maybe he can try with "rawbody" as the subject is the first

Re: Non-ascii subjects with images

2018-09-01 Thread Antony Stone
On Saturday 01 September 2018 at 14:09:52, Rupert Gallagher wrote: > On Sat, Sep 1, 2018 at 09:35, Pedro David Marco wrote: > > > >> On Saturday, September 1, 2018, 7:02:20 AM GMT+2, Rupert Gallagher wrote: > > > > > > Do you have an SA rule for it? > > > > Do you have any sample, Rupert? > > Of

Re: Issues with Yahoo/AOL emails and RCVD_NUMERIC_HELO

2018-07-29 Thread Antony Stone
On Sunday 29 July 2018 at 12:17:07, Sebastian Arcus wrote: > I've been having a number of emails recently from Yahoo and AOL senders > hitting the RCVD_NUMERIC_HELO rule. I'm trying to understand what is > going on: > > 1. First off, the rule hits on the EHLO line - which means the it is an >

Re: Replicating bayes in mariadb over multiple systems

2018-07-20 Thread Antony Stone
On Friday 20 July 2018 at 02:52:48, Alex wrote: > Hi, > > On Thu, Jul 19, 2018 at 8:05 PM, Antony Stone wrote: > > On Friday 20 July 2018 at 01:47:38, Alex wrote: > >> Hi, > >> > >> I'm trying to configure bayes in mariadb to have a central databa

Re: Replicating bayes in mariadb over multiple systems

2018-07-19 Thread Antony Stone
On Friday 20 July 2018 at 01:47:38, Alex wrote: > Hi, > > I'm trying to configure bayes in mariadb to have a central database > that is replicated across multiple systems so they can all share the > same database. Are you using Galera for the replication? > I thought the best way to do that

Re: Score from command line is different from the one in the webmail

2018-07-15 Thread Antony Stone
On Sunday 15 July 2018 at 13:41:34, daniel_1...@protonmail.com wrote: > Dear list, > > I am running spamassassin through amavis as a content filter for postfix. Which user/s do those processes run as? > But when I scan the mail from the command line I have a different score of > only 0.9 and

Re: List From and Reply-To

2018-05-31 Thread Antony Stone
On Thursday 31 May 2018 at 17:35:11, Rupert Gallagher wrote: > Beware of the GDPR. If a current or former subscriber wants their address > deleted, you are in hell. The mailing-list server can cleanup before > itself with a reply-to the list only, and obfuscating the addresses, and > deleting

Re: Fwd: List From and Reply-To

2018-05-31 Thread Antony Stone
On Thursday 31 May 2018 at 12:16:04, Palvelin Postmaster wrote: > > Begin forwarded message: > > > > From: Ian Zimmerman > Are you and Bill Cole doing something different from other list members > because your emails appear to have a Reply-To header? Anyone is free to set a Reply-To header in

Re: [Offtopic] List From and Reply-To

2018-05-30 Thread Antony Stone
On Wednesday 30 May 2018 at 15:33:13, Palvelin Postmaster wrote: > > On 30 May 2018, at 16:06, Matus UHLAR - fantomas > > wrote: > > > > On 30.05.18 15:49, Palvelin Postmaster wrote: > >> Hitting reply sends the response to poster directly > > > > get a mail client that supports mailing lists.

Re: MSGID_SPAM_CAPS fp's hitting messages from The Pension Regulator in UK

2018-04-07 Thread Antony Stone
On Saturday 07 April 2018 at 18:10:18, Sebastian Arcus wrote: > On 07/04/18 16:52, Reindl Harald wrote something. > Thank you for answering, but really, in effect you haven't answered at > all my question. > And the way I customise the scores are based on the type of emails > received at this

Re: The "goo.gl" shortner is OUT OF CONTROL (+ invaluement's response)

2018-04-03 Thread Antony Stone
On Tuesday 03 April 2018 at 16:43:09, Leandro wrote: > 2018-04-03 11:35 GMT-03:00 RW: > > On Tue, 3 Apr 2018 11:09:38 -0300 Leandro wrote: > > > 2018-04-03 10:34 GMT-03:00 Antony Stone: > > > > "IMPORTANT: Current limit is 100 ms per IP block. Lower frequ

Re: The "goo.gl" shortner is OUT OF CONTROL (+ invaluement's response)

2018-04-03 Thread Antony Stone
On Tuesday 03 April 2018 at 16:09:38, Leandro wrote: > 2018-04-03 10:34 GMT-03:00 Antony Stone: > > On Tuesday 03 April 2018 at 15:27:11, Leandro wrote: > > > Hey guys. We just created an URL signature algorithm to be able to > > > query an entire URL at our URIBL: >

Re: The "goo.gl" shortner is OUT OF CONTROL (+ invaluement's response)

2018-04-03 Thread Antony Stone
On Tuesday 03 April 2018 at 15:27:11, Leandro wrote: > Hey guys. We just created an URL signature algorithm to be able to query an > entire URL at our URIBL: > > https://spfbl.net/en/uribl/ I don't think I understand the following statement on that page: "IMPORTANT: Current limit is 100 ms per

Re: Blacklist for reply-to?

2018-02-18 Thread Antony Stone
On Monday 19 February 2018 at 01:55:45, Rupert Gallagher wrote: > Question time! You receive spam with a reply-to your own address. What do > you do? I take it that this is now a rather different question that the one you originally asked in this thread, where the reply-to address was clearly

Re: Email filtering theory and the definition of spam

2018-02-11 Thread Antony Stone
On Sunday 11 February 2018 at 23:04:52, Bill Cole wrote: > On 11 Feb 2018, at 16:20 (-0500), Antony Stone wrote: > > Strange that I can't find SMTP under > > www.rfc-editor.org/rfc/std/std-index.txt > > ‎though, other than STD0060 and STD0071, which are both extensions. >

Re: Email filtering theory and the definition of spam

2018-02-11 Thread Antony Stone
On Sunday 11 February 2018 at 19:15:59, Rupert Gallagher wrote: > Who is the ignorant here? > > Rfc 822, standard: usa https://tools.ietf.org/html/rfc822 "Obsoleted by: 2822" What do you mean by "Standard: USA"? I know what an IETF Standard is, and it's quite different from an RFC, which we

Re: Email filtering theory and the definition of spam

2018-02-11 Thread Antony Stone
On Sunday 11 February 2018 at 08:35:42, Rupert Gallagher wrote: > We are not in USA, where RFC loopholes are written Er, RFCs are written by IETF Working Groups, which are open to *anyone* to contribute to, have members from many different countries and companies around the world, and are not

Re: Maxium URL acceptable length

2018-01-23 Thread Antony Stone
On Tuesday 23 January 2018 at 09:11:06, Pedro David Marco wrote: > Hi, > What is, in your opinion, the maximum URL acceptable length? Acceptable for what? Acceptable for a human to be able to remember? Acceptable for pasting into an email? Acceptable for expecting someone to type? > I am not

Re: From name containing a spoofed email address

2018-01-19 Thread Antony Stone
On Friday 19 January 2018 at 07:40:07, Rupert Gallagher wrote: > See my post of 25/20/2017 to this list. My calendar doesn't go that far :( Antony. -- I wasn't sure about having a beard at first, but then it grew on me. Please reply to the

Re: moving spam to junk folder

2018-01-13 Thread Antony Stone
On Saturday 13 January 2018 at 09:35:47, Matthew Broadhead wrote: > i am using CentOS 7, spamassassin-3.4.0-2.el7.x86_64, > postfix-2.10.1-6.el7.x86_64, with amavisd. > > i set my local.cf to use MySQL as a bayes store and it seems to work > fine setting ham and spam in the database when a

Re: Malformed spam email gets through.

2018-01-03 Thread Antony Stone
On Wednesday 03 January 2018 at 02:39:54, Alex wrote: > Hi, > > Is it possible to at least enforce that the message-ID has a valid domain? If by "enforce" you mean "require" (in other words, you look at whatever message-ID the incoming email has, and you decide that if it doesn't contain a

Re: Malformed spam email gets through.

2018-01-02 Thread Antony Stone
On Tuesday 02 January 2018 at 11:12:57, Rupert Gallagher wrote: > This is the normative reference. I've picked out the significant parts from your email... > RFC 5322, pg. 27, section 3.6.4 > --- > > << The message identifier

Re: Mailsploit

2017-12-13 Thread Antony Stone
On Wednesday 13 December 2017 at 21:41:04, Groach wrote: > Is there any suggestions on a rule or procedure to implement that will > help defend against the MAILSPLOIT type of spoofing? See https://marc.info/?l=spamassassin-users=151265708616825=2 and follow- ups? Antony. -- "Linux is going

Re: Rule to detect mailsploit

2017-12-06 Thread Antony Stone
On Wednesday 06 December 2017 at 18:15:55, John Hardin wrote: > On Wed, 6 Dec 2017, Kevin A. McGrail wrote: > > > > Something like this: > > > > header__KAM_MAILSPLOIT1 From =~ /[\0]/ > > describe__KAM_MAILSPLOIT1RFC2047 Exploit > > https://www.mailsploit.com/index > > > > And a

Re: Off-topic, was: [Re: MailChimp with link to javascript/zip malware]

2017-10-20 Thread Antony Stone
On Friday 20 October 2017 at 19:54:08, Anne P. Mitchell Esq. wrote: > > On Friday 20 October 2017 at 19:29:31, Anne P. Mitchell Esq. wrote: > >> Anne P. Mitchell, > >> Attorney at Law > > > > I'm intrigued as to what the "Esq." in your From address indicates? > > In the U.S., Esq. (short for

Off-topic, was: [Re: MailChimp with link to javascript/zip malware]

2017-10-20 Thread Antony Stone
On Friday 20 October 2017 at 19:29:31, Anne P. Mitchell Esq. wrote: > Anne P. Mitchell, > Attorney at Law I'm intrigued as to what the "Esq." in your From address indicates? Please feel free to reply offlist if appropriate. Thanks, Antony. -- 90% of networking problems are routing

Re: USER_IN_WHITELIST shortcircuits VBOUNCE, please help...

2017-10-07 Thread Antony Stone
On Saturday 07 October 2017 at 16:27:00, djkraz wrote: > I have a user that is getting thousands of backscatter a minute for a > couple days now. I've tried everything I can find on the web to get > vbounce working with no luck as the user is obviously in the whitelist > since they exist on the

Re: Test

2017-08-02 Thread Antony Stone
On Wednesday 02 August 2017 at 13:17:42, Jari Fredriksson wrote: > Just testing, as the list has been silent for me for a week or so. See https://mail-archives.apache.org/mod_mbox/spamassassin-users/ Antony. -- I conclude that there are two ways of constructing a software design: One way is

Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?

2017-07-17 Thread Antony Stone
On Monday 17 July 2017 at 14:25:17, Robert Kudyba wrote: > > On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas wrote: > >> Robert Kudyba wrote: > >>> Over the past few days sending mail via SquirrelMail has become > >>> glacial. The load on the server

Re: ramsonware URI list

2017-07-15 Thread Antony Stone
On Saturday 15 July 2017 at 11:19:54, mastered wrote: > Hi Nicola, > > I'm not good at SHELL script language, but this might be fine: > > 1 - Save file into lista.txt > > 2 - trasform lista.txt in spamassassin rules: > > cat lista.txt | sed s'/http:\/\///' | sed s'/\/.*//' | sed s'/\./\\./g'

Re: low scoring spam

2017-07-14 Thread Antony Stone
On Friday 14 July 2017 at 15:29:38, Charles Amstutz wrote: > Hello, > > I keep having spam come through that hits on almost zero rules, (or very > few) . I get this is definitely possibly, but it's annoying as its > obviously spam. I guess my question is, if what we have in place isn't >

Re: sa-learn won't read db created via MSTOR

2017-07-08 Thread Antony Stone
On Saturday 08 July 2017 at 22:55:36, RW wrote: > I had a spillage and most of the punctuation characters > on my keyboard aren't working at the moment. Oh dear, my sympathies - but what a splendid quote on a mailing list :) Antony. -- Salad is what food eats.

Re: updates.spamassassin.org gone?

2017-07-06 Thread Antony Stone
On Thursday 06 July 2017 at 18:59:19, Rainer Sokoll wrote: > > Am 06.07.2017 um 18:55 schrieb Antony Stone: > > > > "apt-get policy spamassassin" should show you which one really is > > installed > > apt-cache ;-) Oops :) Yeah, I knew it was one of t

  1   2   3   >