***UNCHECKED*** Re: SpamAssassin 3.4.2. - err.h requirement

2018-09-19 Thread Groach
Thanks Kevin Both of my installations had stopped updating since 11th September due to this. Now the updates are working again. From this: 11th Sep 20:00:26.57 Performing Spamassassin Update check... Update available for channel updates.spamassassin.org: 1840397 -> 1840441 http: (lwp) GET

Re: Non-ascii subjects with images

2018-09-04 Thread Groach
I receive emails containing these emojis in subjects regularly. I often found them annoying and common in spam and wondered about catching then just as the original poster requested. But then I looked further and see them often used in genuine emails also. Famously twitter uses these emojis

Re: Line breaks in X-Spam-Report

2018-07-27 Thread Groach
https://github.com/hmailserver/hmailserver/issues/115 (Fyi Your question put to the hmailserver forum would have answered this for you.) On 27 July 2018 10:08:22 BST, Admin wrote: >OK. That explains why I've seen it that way in some examples online. >I'm running hmailserver. Thanks. >

Re: problem with spamassassin for WIndows

2018-02-18 Thread Groach
to use an os different to theirs and ask for help). Do not pursue this particular question on here. On 18 February 2018 16:23:22 GMT+00:00, Gianluca Furnarotto <keyst...@libero.it> wrote: >Thanks Groach, and all guys that answered to me. This was very helpful. >Next step for me is

Re: problem with spamassassin for WIndows

2018-02-18 Thread Groach
Gianluca 1, Your .PRE files are (by default) in: %ProgramFiles(x86)%\JAM Software\SpamAssassin for Windows\etc\spamassassin You will find the 'AutoLearnThreshold' plugin you need in v310.pre. You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre (they may already be enabled

Re: problem with spamassassin for WIndows

2018-02-15 Thread Groach
, it seems I can talk sh1t too). Helpful responses only please, team. On 15 February 2018 22:22:01 GMT+00:00, Reindl Harald <h.rei...@thelounge.net> wrote: >nobody seriously cares ablut windows if it comes to servers - it's that > >easy - period > >Am 15.02.2018 um 23:17

Re: problem with spamassassin for WIndows

2018-02-15 Thread Groach
I originally guided Gianluca you this list for help because as a user i know that the jam port of spamassassin makes an almost identical function of the software which, as you know, operates mainly on these plug ins. Everything you do in Linux you also do in the Windows version. I also know

Re: Email filtering theory and the definition of spam

2018-02-11 Thread Groach
On 12/02/2018 06:54, Rupert Gallagher wrote: A "standard" "obsoleted" by a "proposed standard" or a "draft standard" is nonsense. A standard is obsoleted by a new standard, not a draft or a proposal. RFC 821-822 are still the standard, until their obsoleting drafts and proposals become the new

Re: Mailsploit

2017-12-13 Thread Groach
Noted. In fact, after looking through it in the short term I personally have opted to just take the MAILSPLOIT rules section. Should be pretty static I think. On 13/12/2017 22:24, sha...@shanew.net wrote: Note that after enabling KAM.cf, you'll want to watch more closely for false

Re: Mailsploit

2017-12-13 Thread Groach
On 13/12/2017 21:38, Reindl Harald wrote: Am 13.12.2017 um 21:59 schrieb Groach: Is there any suggestions on a rule or procedure to implement that will help defend against the MAILSPLOIT type of spoofing? Seehttps://marc.info/?l=spamassassin-users=151265708616825=2 and follow- ups

Re: Mailsploit

2017-12-13 Thread Groach
On 13/12/2017 20:48, Antony Stone wrote: On Wednesday 13 December 2017 at 21:41:04, Groach wrote: Is there any suggestions on a rule or procedure to implement that will help defend against the MAILSPLOIT type of spoofing? See https://marc.info/?l=spamassassin-users=151265708616825=2

Mailsploit

2017-12-13 Thread Groach
Is there any suggestions on a rule or procedure to implement that will help defend against the MAILSPLOIT type of spoofing? Full details of it here: https://www.mailsploit.com/index I was thinking if there is a way to have a rule that checks for encoding in the FROM header. OR better, maybe

Re: freshdesk.com and spamassassin mailing list

2017-10-21 Thread Groach
Im concerned they have done it deliberately to harvest email addresses. On 21/10/2017 19:20, Kevin A. McGrail wrote: On 10/21/2017 11:57 AM, Bill Cole wrote: It would be a good idea to figure out what subscribed address is causing these and unsubscribe that address (and ban it) from the

freshdesk.com and spamassassin mailing list

2017-10-21 Thread Groach
Reply-To: Catch all <catch...@freshdesk.com> Subject: Activate your account at Freshdesk Support Portal Hello Groach, A new account has been created for you in our Freshdesk Support Portal. To get started with using our Support Portal, you will have to activate your account. Activat

Re: Off-topic, was: [Re: MailChimp with link to javascript/zip malware]

2017-10-20 Thread Groach
Here you go: https://www.google.co.uk/search?q=what+is+esq+after+a+lawyer%27s+name On 20 October 2017 18:44:15 BST, Antony Stone wrote: >On Friday 20 October 2017 at 19:29:31, Anne P. Mitchell Esq. wrote: > >> Anne P. Mitchell, >> Attorney at Law >

Re: Off-topic, was: [Re: MailChimp with link to javascript/zip malware]

2017-10-20 Thread Groach
Usually Esquire a title used in American Law. (I'm sure Google has more details.) On 20 October 2017 18:44:15 BST, Antony Stone wrote: >On Friday 20 October 2017 at 19:29:31, Anne P. Mitchell Esq. wrote: > >> Anne P. Mitchell, >> Attorney at Law >

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-26 Thread Groach
On 26/09/2017 20:08, David Jones wrote: There is the possibility that Hotmail doesn't like our IP address because it is a consumer/ADSL/end-user IP - although I've removed it from the Spamhaus PBL database. I guess Hotmail must be using an internal database I would put money on this being

Re: Yahoo - Can't figure out a server is down?

2017-03-05 Thread Groach
For info: http://nolisting.org/ On 05/03/2017 14:41, Matus UHLAR - fantomas wrote: Oops, seems I mistook nolisting with other MX-related anti-spam technique postscreen (and many others) uses.

Re: Yahoo - Can't figure out a server is down?

2017-03-05 Thread Groach
On 05/03/2017 14:15, Matus UHLAR - fantomas wrote: does the mx0 has highest preference (lowest priority)? If not, there's little point in using it - nolisting is supposed to catch spambots trying to connect to your backup MXes, not to primaries. No its not. Nolisting is to catch spambots

Re: Yahoo - Can't figure out a server is down?

2017-03-05 Thread Groach
Its called "NOLISTING" - but does it work? An experiment was carried out on a small throughput server. Here is the conclusion: https://www.hmailserver.com/forum/viewtopic.php?p=185262#p185262 (You'll be surprised). On 05/03/2017 06:32, Rob Gunther wrote: We have run our servers with a

Re: New type of monstrosity

2017-02-09 Thread Groach
https://imgs.xkcd.com/comics/duty_calls.png Come on chaps and chapesses. Nothing is going to be concluded between you too. And having the last word doesnt make one better than the others (and it still doesnt make you right). Just agree that neither of you is going to convince the other or

Re: T_DKIM_INVALID from yahoo.com

2016-12-24 Thread Groach
I have just done a test and do not get the same results as you. My yahoo incoming emails pass ok: Return-Path: stopspammin...@yahoo.net X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on mailserver X-Spam-Level: * X-Spam-Status: No, score=1.1 required=3.0 tests=BAYES_50,DKIM_SIGNED,

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-20 Thread Groach
On 20/09/2016 20:31, RW wrote: On Tue, 20 Sep 2016 18:56:47 +0100 Groach wrote: This Spamassassin plugin will allow you to block by country. Create the 'nerd.cf' file containing the code, put it in your spamassasin ETC directory, and uncomment the countries you wish to block. Full details

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-20 Thread Groach
to exclude Spammer Countries e.g. China, Thaiwan, India, etc... On 20/09/2016 18:56, Groach wrote: This Spamassassin plugin will allow you to block by country. Create the 'nerd.cf' file containing the code, put it in your spamassasin ETC directory, and uncomment the countries you wish to block

Re: Spam by IP-address? Spamassassin with geoiplookup?

2016-09-20 Thread Groach
This Spamassassin plugin will allow you to block by country. Create the 'nerd.cf' file containing the code, put it in your spamassasin ETC directory, and uncomment the countries you wish to block. Full details in the post.

Re: sa-update errors

2016-08-31 Thread Groach
On 31/08/2016 10:32, Axb wrote: I get no errors with spamassassin --lint Nor me. All ok.

Re: New Install - Tons of Spam Getting Through

2016-08-19 Thread Groach
On 19/08/2016 11:58, Axb wrote: Question: Does it also support adding 3rd party (native Perl) plugins? or are you tied to the precomplied collection delivered by JAM? Jams product runs with Perl - so any perl plugins provided for Spamassassin should work on the windows versions too. FYI:

Re: New Install - Tons of Spam Getting Through

2016-08-19 Thread Groach
FYI I and many others use Jam's windows port of Spamassassin. It is exactly the same as the linux version in what it can and cant do. Users can modify with plugins, rules, scoring overrides etc just the same as you do on linux. Spamd, spamc, spamassassin... all the same. The only thing

Re: disable X-originating-ip check

2016-07-22 Thread Groach
wong fook loong wrote: hi all is there anyway to disable check the X-Originating-IP in spamassassin ? Why do you want to do that? Looks like someone just trying to have a cheeky joke and broadcasting a naughty name to me. (An old joke. Is he really that good as a lover?)

Re: Anyone else just blocking the ".top" TLD?

2016-07-09 Thread Groach
9, 2016, at 07:52 AM, Groach wrote: Our accountants are actually using '.account' TLD and they are a very reputable business. A surprise when they changed to it, maybe, but change to it they did. My stats provide all the 'evidence' I need. So far, it seems I'm not auto-blocking "*.accou

Re: Anyone else just blocking the ".top" TLD?

2016-07-09 Thread Groach
Our accountants are actually using '.account' TLD and they are a very reputable business. A surprise when they changed to it, maybe, but change to it they did. On 9 July 2016 16:32:51 CEST, jaso...@mail-central.com wrote: > > >On Sat, Jul 9, 2016, at 07:14 AM, Chip M. wrote: >> Thanks for all

Re: whitelist issues with sprintpcs.com

2016-07-03 Thread Groach
On 03/07/2016 23:29, Reindl Harald wrote: sorry, but when i see Benny after 5 years experience on several lists i just have enough, mouth wide often but technical still a noob http://geekologie.com/2011/08/08/mad-on-the-internet-cut.jpg

Re: whitelist issues with sprintpcs.com

2016-07-03 Thread Groach
On 03/07/2016 22:43, Sidney Markowitz wrote: whitelist_from *@pm.sprintpcs.com does not work.. Why? It's because the mail has a Resent-From which overrides any other from type header. From the documentation Mail::SpamAssassin::Conf "The headers checked for whitelist addresses are as

Re: Spamassassin default SHORT_URI list obsolete/outdated

2016-07-01 Thread Groach
On 01/07/2016 09:56, Axb wrote: I then informed him that SA alreadyhas a URL_SHORTENER checking rule found in 72_ACTIVE.CF. I was currently using this as a META rule thus: meta MY_URI_URLSHORT __URL_SHORTENER # defined in 72_active.cf ATM it seems there is no such rule - pls verify

Re: Catching well directed spear phishing messages

2016-06-28 Thread Groach
On 28/06/2016 16:13, David Jones wrote: David Jones wrote on 29/06/16 12:46 AM: No, technology can help. The IT department sets up the mail client that the CEO uses when out of the office so that it sends mail using the company mail server with SSL/TLS and user authentication. Or it uses the

Re: how to write body rules to match 'tortured html' variations of text phrases?

2016-06-15 Thread Groach
On 15/06/2016 22:42, Dianne Skoll wrote: On Wed, 15 Jun 2016 13:40:25 -0700 (PDT) John Hardin wrote: That's (more or less) "Quoted Printable" encoding. AFAIK, SpamAssassin "body" rules are applied after the Content-Transfer-Encoding: has been decoded. So the QP equal

Re: how to write body rules to match 'tortured html' variations of text phrases?

2016-06-15 Thread Groach
On 15/06/2016 22:42, Dianne Skoll wrote: On Wed, 15 Jun 2016 13:40:25 -0700 (PDT) John Hardin wrote: That's (more or less) "Quoted Printable" encoding. AFAIK, SpamAssassin "body" rules are applied after the Content-Transfer-Encoding: has been decoded. So the QP equal

Re: Where to find DETAIL for spamassassin default RULES

2016-06-13 Thread Groach
On 12/06/2016 21:14, Bill Cole wrote: but can you explain why the world needs yet another new mail server implementation? As an example of why I ask this, consider that Microsoft rewrote the SMTP implementation in Exchange 2013 and did it wrong, A question and answer all in one. I like

Re: Where to find DETAIL for spamassassin default RULES

2016-06-12 Thread Groach
On 12/06/2016 21:14, Bill Cole wrote: I was not at all confused, but sometimes when people are Wrong On The Internet in special ways I cannot resist the urge to respond with a paraphrased geek meme... Look up Jamie Zawinski's famous "2 problems" quote regarding regular expressions. It is

Re: Where to find DETAIL for spamassassin default RULES

2016-06-11 Thread Groach
On 11/06/2016 05:09, Bill Cole wrote: So, you thought validating email addresses was a problem demanding a solution? And you "solved" it with a regular expression? Congratulations on now having 2 problems. They should be very happy together. The regex I quoted was out of context to the