Re: Is there a way to block "invalid" non delivery notifications?

2010-06-30 Thread Arvid Picciani
On Wed, 30 Jun 2010 02:02:51 -0700 (PDT), Daniel Lemke wrote: > Are there any special rules that are able to identify this kind of spam? Its not spam, its misconfigured mailservers. Stupid people and malicious people are two different problems. Don't let bayes learn it as spam. We block them at

RE: To get a detailed report of rules violated by the mail

2010-05-31 Thread Arvid Picciani
> Thanks for your reply. I have a doubt, can i use this script to get spam > report of each mail scanned? Maybe all you want is "spamc -R < mail". answers the occasional "why we didn't accept this mail." Well.. mostly.

Re: ot: problem with .de root servers

2010-05-12 Thread Arvid Picciani
On Thu, 13 May 2010 09:49:11 +1200, Jason Haar wrote: > On 05/13/2010 01:17 AM, Timo Schoeler wrote: > > > > and the worst thing was that they sent no SERVFAIL but NXDOMAIN what > > will cause a lot of bounces... > > > Yeah - I'd like to know what crappy DNS server they are running that > does tha

Re: Web Proxy RBL ?

2009-12-30 Thread Arvid Picciani
On 12/30/2009 07:18 AM, William Taylor wrote: Looking for an RBL or something to determine if a given IP is coming from a web proxy. Trying to cut down on spam coming from exploited users sites. Would like to do some logging and see if this helps. Thanks, William i like sorbs, despite a

nonfactual fact: distrust

2009-12-05 Thread Arvid Picciani
J.D. Falk wrote: By the by, I think I posted on this list a while ago on a similar question, as to whether we could really trust *any* whitelists, as they simply made for a *deliberate* target of botnet owners. No one made a fuss about it before, but what about now? Maybe, once again, the fla

Re: Good reasons to dont use RBLs

2009-11-15 Thread Arvid Picciani
Luis Daniel Lucio Quiroz wrote: Hi all, Again me, Well, in the security scope i use a principle that states that you souldnt use a lower layer solution to fix a higher one. So SPAM is a Layer 7 problem that is used to fixed with a Layer 3 solution (RBL). I'd like a brainstorm to convince

Re: SORBS bites the dust

2009-06-27 Thread Arvid Picciani
Michael Grant wrote: Unless I've missed a message... this is the 100th reply to this thread. This has to be one of the longest threads I've seen on this list in years. Shows there is much to discuss on this matter. Isn't there a generic spam related mailing list?

Re: SORBS bites the dust

2009-06-26 Thread Arvid Picciani
Charles Gregory wrote: There are always exceptions. Those can send me (postmaster@) a mail (without beeing blocked) asking for whitelisting. The reject message contains a link explaining how to do that.

backscatter (was Re: cas...@snigelpost.org bounces?)

2009-06-25 Thread Arvid Picciani
Charles Gregory wrote: On Thu, 25 Jun 2009, Arvid Picciani wrote: I started blocking some backscattering hosts and would like to inform them how to fix the issue. I still welcome suggestions for handling the few remaining cases where my procmail chokes on a mailbox limit. Probably more of a

Re: cas...@snigelpost.org bounces?

2009-06-25 Thread Arvid Picciani
John Hardin wrote: Is anybody else getting bounces on mail they send to the list from cas...@snigelpost.org? Yep. I wish backscatter.org had a reporting and educating form. Ie automaticaly inform the postmaster of that system of the listing incuding educational material how to fix it. Btw,

Re: SORBS bites the dust

2009-06-25 Thread Arvid Picciani
Jack Pepper wrote: > How long will this go before Godwin's law finally kicks in? It already did. > 1. It's 'You're' a joke - not 'your' a joke > Now I'm just watching for the fun of it Try IRC :-P

Re: SORBS bites the dust

2009-06-24 Thread Arvid Picciani
serious hosting providers" - I was thinking more of organisations such as 1and1, hetzner, rackspace etc. etc. whats the issue with hetzner? I'm a customer so i'd be very interested in any spam issue not beeing processed by them.

Re: SORBS bites the dust

2009-06-23 Thread Arvid Picciani
It does make you wonder why they never seem to end up on any of the spamhaus lists. Perhaps they are brilliant list washers ? Same here - I see lots of these and they don't score on many lists. It might be an uneducated guess, but i also have some very annoying hosts on the radar which i s

Re: SORBS bites the dust

2009-06-23 Thread Arvid Picciani
WHAT? Sorbs and Spamhaus are polar opposites. Spamhaus is a great organization while SORBS is a POS that helped give all blacklists a bad name. I don't know if SpamAssassin has ever used it. Jeff Moss All i read is "OMG THEY BANNED MY COLORFULL OPT OUT NEWSLETTER111" Sorry i

Re: SORBS bites the dust

2009-06-22 Thread Arvid Picciani
Jeremy Morton wrote: You then have to pay their tithe money to get people to start receiving your e-mail again. sorbs doesn't charge for delisting. Actually no trustworthy bl does.

Re: SORBS bites the dust

2009-06-22 Thread Arvid Picciani
rich...@buzzhost.co.uk wrote: It comes with great sadness that I have to announce the imminent closure of SORBS. The University of Queensland have decided not to honor their agreement with myself and SORBS and terminate the hosting contract. crap ... sorbs is the only list I trust enoug

spamd crash and backscatter related

2009-06-22 Thread Arvid Picciani
Hi, i posted two independent problems, one beeing a high volume of backscatter from rushian MTAs, the other related to SA crashing a lot recently. Those are related. The mail causing the last crash was a bounce from "goof.script.ru". I canno't provide the mails source since i didnt find any

anything usefull to do with a joe-jobed domain?

2009-06-19 Thread Arvid Picciani
Hi, I'm currently convincing my boss to throw away a domain that receives so much backscatter, its useless to try filtering the legitimate mail. Could i do anything useful with it? Spamtrap won't work since 99.99% of mails are backscatter from "legitimate" hosts. Can't block those. Maybe a b

Re: spamd crashing alot

2009-06-14 Thread Arvid Picciani
> On Sun, 14 Jun 2009, Arvid Picciani wrote: > > > I recently got a lot of crashes, any idea how I could find out why? > > What information *do* you have? Umm. It "crashed" and spamc can't connect to it anymore. So I guess the answer is "none"

spamd crashing alot

2009-06-14 Thread Arvid Picciani
Hi, I recently got a lot of crashes, any idea how I could find out why? My mail log doesn't contain anything suspicious. thanks -- Arvid

Re: backscatter from dnswl

2009-06-11 Thread Arvid Picciani
On Mon, 2009-06-08 at 15:41 +0200, Arvid Picciani wrote: Hi, i'm getting _massive_ amounts of backscatter and some of the offenders are listed in dnswl.org Has your domain got an SPF record? yes, and its valid the amount of backscatter is getting out of control. I fear our MRA

Re: backscatter from dnswl

2009-06-08 Thread Arvid Picciani
Matus UHLAR - fantomas schrieb: On 08.06.09 15:41, Arvid Picciani wrote: i'm getting _massive_ amounts of backscatter and some of the offenders are listed in dnswl.org. is there anything i can do about that? ask for DNSWL delisting, if the backscatters are generated by dnswl

backscatter from dnswl

2009-06-08 Thread Arvid Picciani
Hi, i'm getting _massive_ amounts of backscatter and some of the offenders are listed in dnswl.org. is there anything i can do about that? thanks

Re: opinions on greylisting and others

2009-05-25 Thread Arvid Picciani
thanks for your responses. unfortunatly i lost all my local mail when my laptop exploded friday :( does this list have an online archive?