QL or LDAP config so they will
use the same.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
We are but packets in the Internet of life (userfriendly.org)
in documentation
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
You have the right to remain silent. Anything you say will be misquoted
don't see
it.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
He who laughs last thinks slowest.
required=6.31
tests=[DMARC_MISSING=0.001, FSL_BULK_SIG=0.001,
Amavis has some more scores than stock SA, of course they can be modified if
your scanner is well trained.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
, and perhaps it is true that they are mostly spam.
where is the rule stored? what file?
On May 10, 2024, 17:18, Rupert Gallagher wrote:
I only have stock and KAM, and it is definitely not a custom rule of mine.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I
what R_DCD means, and search indexes do not help. Short of
reading the source code, does anybody know what R_DCD means?
I have no idea. where did you get this rule from?
I don't see it in stock rules
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish
ed_above=2 required=6.31
tests=[DMARC_MISSING=0.001, FSL_BULK_SIG=0.001,
HTML_FONT_LOW_CONTRAST=0.001,
HTML_IMAGE_ONLY_24=1.282, HTML_IMAGE_RATIO_02=0.001,
HTML_MESSAGE=0.001,
MIXED_HREF_CASE=1.999, PYZOR_CHECK=1.985, RELAYCOUNTRY_BAD=2,
SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_TVD_MIME_EPI
defines
servers who send your e-mail - thus you know bounces from those hosts are
legitimate. the original message opriginated from mailgun, perhaps you need
to add its servers.
it matches bounces since its a bounce, alt that is seen as a results
of forwarding emails
--
Matus UHLAR - fantomas
On 24.04.24 18:50, Benny Pedersen wrote:
unsure so i ask :)
try to explain your question a bit more
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek
Spamhaus DBL blocklist
25_uribl.cf:tflags URIBL_DBL_SPAM net domains_only notrim
25_uribl.cf:reuse URIBL_DBL_SPAM
...
And I dont have idea how disable all check in spamhaus.org
--
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT
D-HEADER-7 {RelayedInbound}, [34.23.17.0]:38582 [34.23.17.0] <> ->
, Queue-ID: 4VBDq04Bn7z1Q9qQ, mail_id: 6LRhEwtUmP7u,
Hits: -, size: 10888, queued_as: 4VBDq06n69z1Q9q1, 358 ms
I check and I not found any <> in whitelist
check amavis config.
--
Matus UHLAR - fantomas, uh
On 03.04.24 11:18, natan wrote:
Where in pdns-recursor? I use pdns-recursor
/etc/powerdns/recursor.conf
W dniu 3.04.2024 o 13:17, Matus UHLAR - fantomas pisze:
This is not about pdns-recursor itself. It's about using own
recursing DNS server
- you you don't use DNS server of your ISP
connected?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Enter any 12-digit prime number to continue.
::Conf doesn't say that I
could find.
You'd think the first would happen first, since it's more specific.
Or, maybe that both would happen.
On Mar 28, 2024, at 2:39 AM, Matus UHLAR - fantomas wrote:
they both should happen.
note that the second argument must be Received: header provided
depends on proper TrustPath set up
https://cwiki.apache.org/confluence/display/SPAMASSASSIN/TrustPath
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek
that users'
user_prefs file (if it exists) unless spamd was started with "-x" parameter
or can't access that file.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adr
aple:
From: ya...@gmail.com
Return-path: ya...@yahoo.com
If I send an email that would have those headers Spamassassin is getting a
hit for my NOT_IT rule but that should not match because __RETURNAPTH_IS
should not get a hit.
How can I troubleshoot this?
--
Matus UHLAR - fantom
On 19.02.24 15:03, Dejan Doder wrote:
Please unsubscribe me from list
We can't, the process is user-driven.
send mail to users-unsubscr...@spamassassin.apache.org
and confirm in the confirmation mail that will be sent to tou.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
en you use --lint, because it skips
network checks, including DCC.
spamassassin --prefs-file=/etc/spamassassin/local.cf -D 2> tmp.out < ~/test.eml
I have already asked why you use --prefs-file.
You have not answered my question and simply deleted it.
--
Matus UHLAR - fantomas, uh...@fa
, February 19, 2024 at 01:42:46 PM GMT+1, Matus UHLAR - fantomas
wrote:
On 19.02.24 12:37, Pedro David Marco via users wrote:
Does anyone know of a plugin for content modification?
SpamAssassin detects spam, it is not designed to tho content modification.
an example, i want to change the word
cause changing middlesex to
middle--- or sextant to ---tant. You would also invalidate DKIM signatures.
Try avoiding this clbuttic problem.
https://en.wikipedia.org/wiki/Scunthorpe_problem
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e
tc/spamassassin/v310.pre
- try uncommenting it there.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError #98652: Operation completed successfully.
ult/spamassassin for start-up options.
On 14.02.24 00:23, Ken Wright wrote:
So it's normal? I don't need to obsess over it?
You don't. Just note it for further installations.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
in advance!
On 14.02.24 06:15, Niels Kobschätzki wrote:
The service seems to be have renamed. It is the same on Debian. You also
have to change now /etc/default/spamd instead of /etc/default/spamassassin
for start-up options.
and the "spamd" package as well.
--
Matus UHLAR - fantoma
s well.
On 2/5/24 09:49, Matus UHLAR - fantomas wrote:
what if you do?
does ExtractText only run one of configured programs for the same type of file?
On 05.02.24 12:14, giova...@paclan.it wrote:
Exactly, ExtractText only run the first configured program for the same type of
file.
ograms for the same type of
file?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.
On 2024-01-30 at 12:08:18 UTC-0500 (Tue, 30 Jan 2024 18:08:18 +0100)
Matus UHLAR - fantomas
is rumored to have said:
[...]
autolearn may help if your DB is well maintained, although I have
disabled nearly all rules with negative scores, like
RCVD_IN_DNSWL_*
RCVD_IN_IADB_* DKIMWL_WL_
*
USER_IN_DEF_*
ALL_TRUSTED
etc, because spammers often abuse these.
I mean, they may have negative score but don't train on them.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu c
0 1172945918 0 non-token data: oldest atime
so, even old spam mey be fine. You however need much of ham to train
otherwise everything starts looking like spam.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising
on the fricken machine
in the fricken first place.
I am not going to run cpan with force because that may hide *real* errors.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem
On 26.01.24 11:03, Rupert Gallagher wrote:
Subject: FORGED_HOTMAIL_RCVD2
Rule broken. Please update.
can you provide more info, perhaps headers?
header FORGED_HOTMAIL_RCVD2 eval:check_for_no_hotmail_received_headers()
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
and its country of origin I
sometimes block the sending IP by some method.
perhaps you could add to your SA config or user_prefs:
add_header spam LastIP _LASTEXTERNALIP_
https://spamassassin.apache.org/full/4.0.x/doc/Mail_SpamAssassin_Conf.html
--
Matus UHLAR - fantomas, uh...@fantomas.sk
I redirect spam to a mailbox if I use the milter?
spamass-miter supports "-b spamaddress" option to redirect spam.
I prefer "-r nn" option that rejects mail if it scores over "nn" SA points.
I use reject score 8 on tuned systems, 10 on non-tuned.
--
Matus UHLAR - fantoma
enough.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
10 GOTO 10 : REM (C) Bill Gates 1998, All Rights Reserved!
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Eagles may soar, but weasels don't get sucked into jet engines.
On 04.01.24 22:57, Matija Nalis wrote:
bodyGIFT_CARD /gift card/i
score GIFT_CARD 1.5
metaFREEMAIL_GIFTCARDSGIFT_CARD && (FREEMAIL_FROM ||
!DKIM_VALID)
Matus UHLAR - fantomas skrev den 2024-01-05 09:06:
shouldn't that be !DKIM_VALID_AU ?
valid DKIM signatu
On 04.01.24 22:57, Matija Nalis wrote:
bodyGIFT_CARD /gift card/i
score GIFT_CARD 1.5
metaFREEMAIL_GIFTCARDSGIFT_CARD && (FREEMAIL_FROM || !DKIM_VALID)
shouldn't that be !DKIM_VALID_AU ?
valid DKIM signature means nothing by itself
--
Matus UHLAR - fant
mbo where I can
see the email got marked but GMail is not marking it either way.
can we see headers From: and Authentication-Results as they were seen on
your server?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this ad
om:
When you forward e-mail, SRS makes sure SPF record is from your domain, but
the DKIM signature must be made by sending server, so forwarded messages
without valid DKIM signature will not pass.
Many thanks for your help, it's genuinely appreciated!
--
Matus UHLAR - fantomas, uh...@fantomas
ft tenants.
What?
If the message came from .outlook.com hosts, it should be reported to
ab...@outlook.com.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolve
tityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR20MB3698
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Remember half the people you know are below average.
On 29.12.23 22:08, FalconChristopher wrote:
Anyone know how I can check and setup SpamAssassin so that I can
eliminate some spam from coming in from a email account ?
do you mean if one of your users started spamming out?
On 12/28/2023 2:24 AM, Matus UHLAR - fantomas wrote:
On 27.12.23 16
but I don't know how to setup what I mentioned
above ?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I don't have lysdexia. The Dog
ot;razor_config" is
incorrect? That might be helpful.
what is in the /etc/mail/spamassassin/.razor/razor-agent.conf ?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVA
oogle have a history of not honouring TTL's, and it
always pays to use a DNS server that you don't think would have your
zone cached, to get a fresh perspective.
correct.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to th
On 17.11.23 11:19, natan wrote:
E-mail was signed DKIM but why SA set "DMARC_REJECT" in this time ?
W dniu 17.11.2023 o 12:31, Matus UHLAR - fantomas pisze:
it's hard to see this without envelope and header from:
On 17.11.23 12:42, natan wrote:
Return-Path:
<3jtxxzr
be the reason for subdomain alignment.
good news dmarc plugin in sa trunc does aswell work in spamasasssin
3.4.6 last time i tryed
i am still waiting for spamassassin stable release of 4.x
That happened 11 months ago today, where have you been?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
t;
E-mail was signed DKIM but why SA set "DMARC_REJECT" in this time ?
it's hard to see this without envelope and header from:
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adr
hard time writing my own rules, has worked quite
well. (Up until the spammers started just dropping their fake invoice
content into an attached image - or PDF.)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to thi
uot;Missed SPAM"?, thinking
along lines of keeping BAYES "clean and sharp". So to speak.
Leave as is? Delete and re learn?
On 11/14/2023 13:46:11, Matus UHLAR - fantomas wrote:
Simply relearn FPs. Unless you have huge misclassification issue,
learning as few mail as one should fix BAY
uot;Missed SPAM"?, thinking along lines
of keeping BAYES "clean and sharp". So to speak.
Leave as is? Delete and re learn?
Simply relearn FPs. Unless you have huge misclassification issue, learning
as few mail as one should fix BAYES issues.
--
Matus UHLAR - fantomas, uh...@fantom
able under "imaps" user, e.g. virtual users or similar.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Posli tento mail 100 svojim
What platform are you running on? (OS, distro, perl version, etc.)
Debian 12.
sa-update version 4.0.0 / svn1900642
running on Perl version 5.36.0
Matus UHLAR - fantomas writes:
Debian 12 contains SpamAssassion 4.0.0-6.
Cecil Westerhof writes:
Strange. When running 'apt update' I get
What platform are you running on? (OS, distro, perl version, etc.)
Debian 12.
sa-update version 4.0.0 / svn1900642
running on Perl version 5.36.0
Matus UHLAR - fantomas writes:
Debian 12 contains SpamAssassion 4.0.0-6.
On 02.11.23 21:43, Cecil Westerhof wrote:
Strange. When running 'apt
?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The only substitute for good manners is fast reflexes.
*/
looks like you have problem reading or writing.
If you want less generic answer, please provide info what command you
execute and what is the exact error.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address
spamd"
I assume that's ok.
Matus UHLAR - fantomas skrev den 2023-10-31 11:48:
yes, although --create-prefs is useless when you use --nouser-config
On 31.10.23 17:51, Benny Pedersen wrote:
and --create-prefs needs root ?
no. Even if you keep spamd running as root, it won't che
spamd"
I assume that's ok.
yes, although --create-prefs is useless when you use --nouser-config
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolve
RON=1
since SA 4, spamd uses /etc/default/spamd
I don't use -u option, so spamd setuids to user spamc provides, this allows
spamd use per-user configuration files.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to th
the author of 'w7_whitelist.cf' for support of whatever configuration
it includes.
This only produces error because WelcomeListSubject does not exist and WhiteListSubject
is not installed.
Fixing the error above should fix this as well.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://ww
Matus UHLAR - fantomas skrev den 2023-10-25 09:36:
I have:
50_scores.cf:score DKIM_VALID -0.1
check if you really haven't set score for DKIM_VALID anywhere, since
SA complains about it being zero.
I guess this may cause DKIM_INVALID misfiring
On 25.10.23 13:08, Benny Pedersen wrote:
imho
87779] info: util: setuid: ruid=0 euid=0 rgid=0 0
egid=0 0
>Oct 25 07:10:54.364 [1687666] info: rules: meta test DKIM_INVALID has
dependency 'DKIM_VALID' with a zero score
Matus UHLAR - fantomas hat am 25.10.2023 08:16 CEST
geschrieben:
did you set score of DKIM_VALID do 0 ?
On 25.10.2
=1.6 required=5.0 tests=ALL_TRUSTED,DKIM_INVALID,
DKIM_SIGNED,KAM_DMARC_REJECT,KAM_DMARC_STATUS autolearn=disabled
version=3.4.6
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto
A00BBB6E6000B5BBF9
7B16F0AE24BA3D270A637831578CAB77333E06029E36245B2E3DACE37D29594
x-originating-ip: [195.154.60.67]
x-esetresult: clean, is OK
x-esetid: 37303A2976F0D65A657466
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to th
just have to check which of them is not
a list that lists any 'dynamic' ip by default.
zen is not good idea for auth too. It's supposed to contain dynamic IPS
which aren't used for spaming.
authbl from spamhaus should do that.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fant
.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
It's now safe to throw off your computer.
their credentials
compromised.
can you describe it more?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Due to unexpected conditions Windows 2000
for more information.
On 2023-09-12 at 02:51:46 UTC-0400 (Tue, 12 Sep 2023 08:51:46 +0200)
Matus UHLAR - fantomas
is rumored to have said:
have you also read the link(s) above?
SA explains the problem and how to avoid it, namely points to:
https://cwiki.apache.org/confluence/display
from
one of my .pre files, or do I have to somehow add that to a scan
command-line?
On 12.09.23 08:47, Matus UHLAR - fantomas wrote:
I bumped mine to maximum size my server can accept, currently 30M.
I checked my spambox for biggest spam recorded (not rejected or lost)
and I have pretty much s
to avoid it, namely points to:
https://cwiki.apache.org/confluence/display/SPAMASSASSIN/CachingNameserver
Unfortunately, the current page does NOT have A name="dnsbl-block", which
should be fixed.
Is anyone familiar with this wiki?
--
Matus UHLAR - fantomas, uh...@fantomas
t the size of content for BAYES or RE rules,
scanning bigger messages makes sense, especially if spammers add huge images
to avoid getting checked.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovani
MPTY
score LOCAL_BADLY_HTML 3 3 3 3
too much spams in hotmail
not so good numbers here. Only spam that wasn't rejected here:
% grep -c '^From ' spam
9332
% grep -Fc 'src=""' spam
3
% grep -Fc 'href=""' spam
18
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fa
ne except previously mentioned it UNAUTHORIZED
to send mail.
fantomas.sk.43200 IN TXT "v=spf1 mx -all"
meant only "mx" servers for fantomas.sk can send mail from this domain, all
the rest is unauthorized.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ;
10-minute timeout on DATA termination, but here we are).
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Your mouse has moved. Windows NT will n
.1 OK"
just define access database for sendmail
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I intend to live forever - so far so good.
t
issue (calling "sendmail -bv " does not work on postfix
systems)
you can use -S option to override path to sendmail and call your own script
instead of patching spamass-milter
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receiv
On 05.07.23 04:38, Robert Senger wrote:
> Thanks for the hint that the milter is responsible for that. Found
> a
> little patch for spamass-milter that fixed this.
Am Mittwoch, dem 05.07.2023 um 10:20 +0200 schrieb Matus UHLAR -
fantomas:
note that the headers that appear first in th
arc, clamav ... ) does?
> Can
> this behavious be changed?
Am Dienstag, dem 04.07.2023 um 19:45 -0400 schrieb Jared Hall:
Mine are at the top, but usually this is the responsibility of the
Milter. What Milter/content_filter are you using?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; htt
On 24.06.23 02:12, Denny Jones via users wrote:
Spamassassin Version: 3.4.2Amavisd-new Vrsion: 2.7.1
ALL_TRUSTED is always in every header:Here's an example header:
On 6/25/2023 9:23 AM, Matus UHLAR - fantomas wrote:
do you use amavisd-milter?
There's bug in older versions of amavis
dding clear_internal_networks and clear_trusted_networks
You probably noticed I bumped up the ALL_TRUSTED score but even if use the
default value (-1) it still fires on every message.
Any clues as to where to start sleuthing this?
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www
, so you won't allow someone like:
"cli...@client.com "
header FROM_CLIENT_IP Received =~ /from 138\.31\230\.222/
This can be also tricked, I recommend using X-Spam-Relays-Trusted
pseudo-header:
https://cwiki.apache.org/confluence/display/SPAMASSASSIN/TrustedRelays
--
Matus UHLAR
[17570] dbg: authres: skipping header, unknown
property for spf/smtp: mfrom
is sender-id still not depricated ?
it's status: historic. It's also patended and since it's broken by design,
there's no reason to support or use it.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk
of code.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
My mind is like a steel trap - rusty and illegal in 37 states.
On Wed, 31 May 2023, Matus UHLAR - fantomas wrote:
milter adds own synthetised Received: header at the very beginning,
which is mosts possibly the correct reason. spamass-milter should
add this header behind locally added Authentication-Results:
headers, but it needs change in spamass-milter
> Matus UHLAR - fantomas:
> > that will need spamass-milter change.
On 31.05.23 13:52, David Bürgin wrote:
> Have you tried setting:
>
> authres_trusted_authserv fantomas.fantomas.sk
I did. that's why it works then checking later.
> I think this should work with
Matus UHLAR - fantomas:
that will need spamass-milter change.
On 31.05.23 13:52, David Bürgin wrote:
Have you tried setting:
authres_trusted_authserv fantomas.fantomas.sk
I did. that's why it works then checking later.
I think this should work without changing anything in the milter
Matus UHLAR - fantomas:
I happily use spamass-milter to filter spam at SMTP time.
Prior to spamass-milter, I use pyspf-milter/opendkim/opendmarc milters to mark
if mail passes coresponding checks.
I also use authres plugin to use these results. However, it does not work when
receiving mail
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Holmes, what kind of school did you study to be a detective?
- Elementary, Watkins
ike viagra, unubscribe etc.
they don't compare domains to each other.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Chernobyl was an Windows 95
ne, as one would expect.)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I wonder how much deeper the ocean would be without sponges.
as a filter, as there is typically no answer
section in a DNS reply when rcode indicates an error. Example:
[NXDOMAIN], or [FormErr,ServFail,4,5] .
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na
sible dkim records for a domain.
a trick: if _domainkeys.example.com exists (returns anything but NXDOMAIN),
we may assume that at least DKIM records exist.
I just have no idea how to test this in SA (at least not within rule).
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.s
On 29.04.23 12:42, i...@servermx.com wrote:
we have installed Spamassassin (debian 11.6) vesion 4.0 from source.
why from source? SA 4.0 for deban 11 is available in backports.
Futher it's upgradable, unlike when built from source.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http
o any rule based on headers than can be faked is a
bad idea.
That's why I advised using X-Spam-Relays-Trusted header (maybe
X-Spam-Relays-Internal)
FROM_TEST_EMAIL and FROM_TEST_IP have both default positive score 1.0.
you should perhaps use __FROM_TEST_EMAIL and __FROM_TEST_IP instead
-Trusted pre-paresed pseudo-header:
https://spamassassin.apache.org/full/4.0.x/doc/Mail_SpamAssassin_Conf.html
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT a
complicated regex and quite possibly wrong,.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Despite the cost of living, have you noticed how
On 20.04.23 11:20, White, Daniel E. (GSFC-770.0)[AEGIS] via users
wrote:
Is there any chance that SPF and DKIM records could be added to
appear in the headers ?
The gubba-mint folks are getting extremely medieval about email
security.
Matus UHLAR - fantomas skrev den 2023-04-20 13:44:
SPF
org
[3.227.148.255])
by fantomas.fantomas.sk (Postfix) with ESMTPS id 3245DA00EA
for ; Thu, 20 Apr 2023 13:47:49 +0200 (CEST)
so I know that Authentication-Results: were added by my server after
receiving this mail from apache.org.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; htt
sign your outgoing mail with DKIM.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0
Matus UHLAR - fantomas skrev den 2023-03-27 16:56:
I have no problems with rejecting high scoring spams at SMTP level,
spamass-milter or amavisd-milter.
i can do this in fuglu with is not a milter, thats not my point of
spamassassin is not designed to reject
SA is safe to reject at scores 8
1 - 100 of 2463 matches
Mail list logo
