Re: Warning: Your Pyzor may be broken.

2024-06-10 Thread Tom Hendrikx
the status of that infrastructure either. So I'd be careful when using the public servers too. That's always true for public gratis services, but maybe take some extra caution as the project seems less alive. Tom

Re: [UPDATE] Changes to Validity Reputation Data Through DNS

2024-01-19 Thread Tom Bartel
On Thu, Jan 18, 2024 at 6:53 PM Greg Troxel wrote: > H > Tom Bartel writes: > > > Starting March 1, 2024, we will allow up to 10,000 requests per user > over a > > 30-day time period. After the 10,000 requests, users must create a > > MyValidity account to continue

[UPDATE] Changes to Validity Reputation Data Through DNS

2024-01-18 Thread Tom Bartel
questions and/or feedback, LMK. Thanks, Tom Dear SpamAssassin user, We wanted to send you a quick reminder of the upcoming changes to accessing Validity reputation data through DNS. Starting March 1, 2024, we will allow up to 10,000 requests per user over a 30-day time period. After the 10,000

Re: DNS Help

2023-09-11 Thread Tom Williams via users
to that, I had to configure Spamassassin to point to the local resolver and my URIBL_BLOCKED issue pretty much went away. Tom

Re: Welcome/unwelcome list not working correctly.

2023-07-24 Thread Tom Hendrikx
/spamassassin_current_release_4.0.x/sql/README Kind reagards, Tom

Re: increase Pyzor weight

2023-06-28 Thread Tom Hendrikx
-OPTIONS Kind regards, Tom

Re: SA build from cpan fails under certain conditions

2022-12-22 Thread Tom Hendrikx
AN. But I want to let you know that your questions on this list are useful, so please continue. Kind regards, Tom

Re: FMBLA_NDBLOCKED and DKIMWL_BLOCKED

2022-11-19 Thread Tom Hendrikx
ms there is some talk about accounts etc. Did you try to sign up? Kind regards Tom

Re: Question about whitelisting of naadac.org

2021-08-12 Thread Tom Hendrikx
customers. So you need to get in touch with them, not with the SA community (but as you can see, we're happy to point you in the correct direction ;-> ). Kind regards, Tom On 12-08-2021 22:16, Lukasz Maik wrote: Dear John, Sure, please find full tests results here: https://www.mail-tester.

Re: Detect Emoticons in Subject

2021-05-21 Thread Tom Hendrikx
ot support this type of syntax, or what would be needed to get it supported? IMHO it makes it a lot easier for end-users to understand a rule, and for rule developers to write or even contribute new UTF-8-related rules, so it might be worth the effort to get it supported? Thanks in advance, Tom

Re: Using spamassassin modules from a git repo

2021-04-08 Thread Tom Hendrikx
How about cloning outside your etc directory, for instance in /usr/local? And then adding the correct paths to local.cf, as usual. Kind regards, Tom On 08-04-2021 11:05, Michael Grant wrote: I'm running debian on my mail server. I use etckeeper to track changes in /etc. Often I run

Re: adding AV scanning to working Postfix/SA system

2020-12-02 Thread Tom Hendrikx
On 02-12-2020 16:18, Joe Acquisto-j4 wrote: X-Spam-Virus: _CLAMAVRESULT I never integrated Clam using this plugin, but this seems a config typo to be: there should be a Yes/No in there, and optionally a virus name. Kind regards, Tom

Re: Reporting spoofing to Amazon

2020-10-24 Thread Tom Williams
. In this case I called Amazon. They immediately returned my call and provided an e-mail address: stop-spoof...@amazon.com -Ramon F. Herrera Yes, I've sent many samples of phishing email messages to that Amazon email address.  I know it well.  :) Peace... Tom

Re: Question about the 'URIBL_BLOCKED' rule

2020-05-04 Thread Tom
On 5/3/20 1:16 AM, Bill Cole wrote: > On 30 Apr 2020, at 14:59, Tom Williams wrote: > >> Hi!  I'm new to this mailing list, but not new to SpamAssassin. I've >> used it on and off for a number years.  :)   Recently, (within the >> past 6 months or so) I enabled it for email

Re: Question about the 'URIBL_BLOCKED' rule

2020-05-02 Thread Tom
and DNS configuration. Thanks! Tom On 5/2/20 3:25 AM, Jari Fredriksson wrote: > I have too had a problem of this in my masscheck box. It is a cloud VM > in Google Cloud and they do like to provide a /etc/resolv.conf for > their own DNS which has been next to impossible to overc

Question about the 'URIBL_BLOCKED' rule

2020-04-30 Thread Tom Williams
SpamAssassin 3.0 (shudders, I know it's ancient). Thanks in advance! Tom

spamd 'exceeded time limit' inquiry

2019-11-29 Thread Tom H
Hey everyone, I have a few questions about something I'm encountering with spamd. I've noticed cases where a bounce message to the server results in spamd 'exceeded time limit'. It reaches the limit of 300+ seconds. In this particular case, the message size is 564kB and contains an attachment.

Re: Trusted network mail spam detection

2019-10-16 Thread Tom Hendrikx
tworks/internal_networks are misconfigured, so the authentication is not properly detected? Kind regards, Tom

Re: Rule for detecting two email addresses in From: field.

2019-10-04 Thread Tom Hendrikx
witch to a decent one). Anyway, the main harm is done when the email adresses in the 'addr' field and the 'name' are different, and that's detectable. Kind regards, Tom

Unsubscribe

2019-08-02 Thread Tom Boland

Open source (WAS: Spam rule for HTTP/HTTPS request to sender's root domain)

2019-03-21 Thread Tom Hendrikx
d open source, and it's a good thing. For details on the philosophy behind it, http://www.catb.org/~esr/writings/cathedral-bazaar/cathedral-bazaar/ is a good read. In short: if you like your project to prosper, put it on github for everyone to see. Kind regards, Tom signature.as

Re: New type of SPAM aggression

2019-02-06 Thread Tom Hendrikx
ers) think that such a DNSBL should be actually used. Can you disclose which parties you found? Kind regards, Tom On 06-02-19 14:40, Rupert Gallagher wrote: The spammers at gremlin.ru have just created a homepage, with no information on how to delist an IP. Their fake dnsbl is listed

Re: RBL

2018-10-10 Thread Tom Hendrikx
On 10-10-18 21:51, Tom Hendrikx wrote: > On 10-10-18 21:05, Gokan Atmaca wrote: >> Hello >> >> I'm using Postfix and Dovecot. I use Spamassassin as an antispam >> service. I don't know how to do RBL checks. >> How do I control RBL? (I don't want to do it with

Re: RBL

2018-10-10 Thread Tom Hendrikx
ists.) > > Thanks. > Hi, See: http://lmgtfy.com/?q=postfix+rbl Please ask further questions on the Postfix mailinglist, as you have a postfix question, and this is the spamassassin list. Kind regards, Tom

Re: No rule updates since 1/1/17

2018-08-26 Thread Tom Hendrikx
this up, and it has been running without issues ever since. When you're interested, read up on https://wiki.apache.org/spamassassin/NightlyMassCheck and try to set it up. If you run into issues, other masscheckers can probably help you out. Kind regards, Tom On 25-08-18 16:12, David Jones wrote

Re: Remove SA tagging when learning as ham

2018-06-18 Thread Tom Hendrikx
your Spam folder, otherwise it's not. And when moving around the message, you don't end up with non-spam messages that have a spam tag in the subject (because you never added one). Kind regards, Tom On 18-06-18 14:22, Kevin A. McGrail wrote: > I'd look > at https://serverfault.com/

Re: how to remove T_RP_MATCHES_RCVD

2018-04-05 Thread Tom Hendrikx
no > BAYES_00 means 'pretty sure it's ham'. BAYES_99 means 'pretty sure it's spam'. BAYES_50 means 'no idea'. Scoring BAYES_50 at 4.3 is your scoring issue, nothing's wrong with T_RP_MATCHES_RCVD. Kind regards, Tom > always the score is -0.01 regardless; I will take your

Re: bypass milter but not the test.

2018-04-04 Thread Tom Hendrikx
Hi, Sounds like a mimedefang question, not a spamassassin one. But did you restart mimedefang after adding the rule? Kind regards, Tom On 04-04-18 15:16, saqariden wrote: > Hello everybody, > > I'm using spamassassin with mimedefang, i have some custom rulesets, one > of

Re: Junk mixed in with ham on whitelists

2018-02-21 Thread Tom Hendrikx
efault. Not sure about the actual default in current SA code though. Kind regards, Tom

Re: Report AmazonSES spam?

2018-02-21 Thread Tom Hendrikx
IKE_H3,RCVD_IN_MSPIKE_WL,SPF_PASS, > T_DKIM_INVALID,T_RP_MATCHES_RCVD,URIBL_BLACK autolearn=no > autolearn_force=no > version=3.4.1 How about: https://aws.amazon.com/forms/report-abuse Kind regards, Tom

Re: Email filtering theory and the definition of spam

2018-02-08 Thread Tom Hendrikx
Alex just >> made me aware of http://dkimwl.org/ which looks brilliant.  Exactly lines up >> with how I filter and what I have been wanted to do for a couple of years >> now.  A community-driven clearing house for trusted senders. >> > dkimwl.org looks promising, but tell them their https cert has expired. > Giovanni > Also, they refer to the TOU for acceptable usage, but both /terms and /license have a 404. Kind regards, Tom signature.asc Description: OpenPGP digital signature

Re: dns-blocklist aren't used but should be

2018-01-07 Thread Tom Hendrikx
amassassin? Please show values for: - dns_available - dns_server - clear_dns_servers - dns_local_ports_permit - dns_local_ports_avoid - dns_local_ports_none - dns_options - dns_query_restriction - clear_dns_query_restriction - rbl_timeout You can find the meaning of these (and many other) configuration opti

Re: help with phishing email?

2017-12-08 Thread Tom Hendrikx
at, and then subtract some points for everything that has '\bAmazon\b' is the from:name. Header. Kind regards, Tom signature.asc Description: OpenPGP digital signature

Re: Rule to match when multiple FROM addresses exist

2017-12-01 Thread Tom Hendrikx
email addresses: john@company.tld server domain: mailserver.company.tld Automatic generated addresses would look like john@mailserver.company.tld, these are easily recogized because nobody uses them. Kind regards, Tom

Re: Ruleset updates via nightly masscheck status

2017-11-13 Thread Tom Hendrikx
27 09:48:24 myhostname spamd[16256]:  (Can't locate object method >>> "check_dkim_valid_envelopefrom" via package "Mail: >>> [...]:SpamAssassin::PerMsgStatus" at (eval 1369) line 305. >>> Oct 27 09:48:24 myhostname spamd[16256]: ) >> >> The DKIM_VAL

Re: Ruleset updates via nightly masscheck status

2017-10-27 Thread Tom Hendrikx
Oct 27 09:48:24 myhostname spamd[16256]: (Can't locate object method "check_dkim_valid_envelopefrom" via package "Mail: [...]:SpamAssassin::PerMsgStatus" at (eval 1369) line 305. Oct 27 09:48:24 myhostname spamd[16256]: ) Any idea? This is ubuntu 16.04, latest ubuntu package (3.4.1-3) for spammassassin. Kind regards, Tom

Re: URIBL_BLOCKED - which one?

2017-10-13 Thread Tom Hendrikx
Hi, Note that on at least Ubuntu from some time ago, unbound was automatically configured to take the dns servers that were received from an upstream server during DHCP, and configure those as forwarders. Can you show us output of: unbound-control list_forwards Kind regards, Tom On 13

Re: Bayes auto-learn - not happening, tentative success....

2017-08-11 Thread Tom Hendrikx
g from the root role will not have the same impact as running amavis using an init system. Kind regards, Tom signature.asc Description: OpenPGP digital signature

Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?

2017-07-17 Thread Tom Hendrikx
On 17-07-17 16:39, Robert Kudyba wrote: > >> On Jul 17, 2017, at 10:28 AM, Tom Hendrikx <t...@whyscream.net >> <mailto:t...@whyscream.net>> wrote: >> >> On 17-07-17 16:00, Robert Kudyba wrote: >>> >>>> On Jul 17, 2017, at 9:39 AM,

Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?

2017-07-17 Thread Tom Hendrikx
e=15.0,size=1843,user=spamd,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=53074,mid=<32889a456ed9c9911ff0034513796858.squirrel@ourdomain>,bayes=0.00,autolearn=no > autolearn_force=no > Jul 17 09:55:28 storm spamd[28041]: prefork: child states: II > The error is still the same. Do you even have access to those cloudmark razor servers? Does razor work outside of spamassassin/amavisd? Tom

Re: Score maths

2017-04-25 Thread Tom Hendrikx
would say '3.0', you would be asking why a message with score 3 wasn't blocked. So the 2.9 indicates that it's not 3 ;) Kind regards, Tom On 25-04-17 10:27, Geoff Soper wrote: > X-Spam-Status: No, Score=2.9 > > X-Spam-Report: > > * -0.0 NO_RELAYS Informational: message was

Re: Problem with massive log files

2017-04-05 Thread Tom Hendrikx
rds, Tom On 04-04-17 23:09, Jim McLachlan wrote: > Hi, > > I have a problem with the huge amount of messages being logged by > spamassassin. I have around 10 active e-mail users on the system, none > of whom have any unusual e-mail usage. This is what I've seen in

Re: Fastest listing RBL ?

2017-02-16 Thread Tom Hendrikx
On 16-02-17 06:22, Ian Zimmerman wrote: > On 2017-02-15 16:30, Tom Hendrikx wrote: > >> Note that the period that you describe as 'seen by SA a bit later' is >> typically less than a second. > > Not in my case. I have a custom Exim configuration where I > inte

Re: Fastest listing RBL ?

2017-02-15 Thread Tom Hendrikx
response time to new (types of) spam and their TTLs. Kind regards, Tom

Re: No rule updates since 1/1/17

2017-01-20 Thread Tom Hendrikx
ate. > > Dave > I think I can say the same about my platform, but since this issue keeps popping up I just applied for an account just to find out if my contribution could help. I can't speculate so I'm just gonna try if it helps :) Kind regards, Tom signature.asc Description: OpenPGP digital signature

Re: Increase BAYES_99 score?

2017-01-10 Thread Tom Hendrikx
hat the message contains a large > amount of non-latin1 text? I do get a lot of legitimate non-ISO-8859-1 > messages but usually it's just a name or at most an address. So less > than 100 bytes. > Please start a new thread and show us a sample of such a message, and the scores you are seeing with your setup. Kind regards, Tom

Re: T_DKIM_INVALID from yahoo.com

2017-01-01 Thread Tom Hendrikx
On 29-12-16 19:40, Marc Stürmer wrote: > Zitat von Tom Hendrikx <t...@whyscream.net>: > >> Did you file a ticket with them? I'm curious as to what they are saying >> about it. > > Actually I got this info by their phone support, and the info was back > the

Re: T_DKIM_INVALID from yahoo.com

2016-12-29 Thread Tom Hendrikx
their DNS software - tried it myself. > Did you file a ticket with them? I'm curious as to what they are saying about it. Kind regards, Tom

Re: Penalizing code not working?: Don't mix company and user email domains.

2016-06-15 Thread Tom Hendrikx
hecks. If you expect to have any useful mail contact by relaying mail with a gmail/aol/yahoo sender envelope through your own mail platform, (i.e. delivering without using their SMTP relay), you're dreaming. The freemail providers are making that harder and harder by deploying DMARC p=reject. The question arises: why would you use a Gmail address at all if you don't want to use their services? Regards, Tom

Re: local uribl is not called

2016-06-14 Thread Tom Hendrikx
gt;>> instead of >>> uridnsbl >>> >>> so no "as said the syntax seems to be correct" it is NOT > > again: what about fix > https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Plugin_URIDNSBL.html > which says still: > Please suggest an proved documentation text so the devs can add it. Kind regards, Tom

Re: spamassassin --lint errors like Subroutine File::Spec::Unix::canonpath

2016-06-09 Thread Tom Hendrikx
elf.fp.readline() > KeyboardInterrupt > This happens when you CTRL-C the pyzor client (KeyboardInterrupt) that is waiting for data at standard input. See 'man pyzor' for details. What were you trying to achieve? Kind regards, Tom signature.asc Description: OpenPGP digital signature

Re: DNS again

2016-06-04 Thread Tom Hendrikx
ur, set RESOLVCONF_FORWARDERS=false in /etc/default/unbound, and restart unbound. Regards, Tom signature.asc Description: OpenPGP digital signature

Re: Way to set user-prefs without a database?

2016-05-19 Thread Tom Hendrikx
ow about using "whitelist_to r...@example.tld", possibly with an adapted negative score for the associated rule (which is not really clear from the documentation)? Kind regards, Tom signature.asc Description: OpenPGP digital signature

Re: FSL_HELO_HOME: deep headers again

2016-05-13 Thread Tom Hendrikx
; certain that a mail is spam which is *not* backed by a single header, > deep inspection or not > That is true, but I think you should put your money where your mouth is: just run the masscheck on your corpus and send the results to the devs for inspection. If it's not working, you lost nothing. If the data *is* useful, we all win from your work by getting better scores. Just my 2 cents. Regards, Tom signature.asc Description: OpenPGP digital signature

Re: What do I do to fix this? bayes db update ignored: Permission denied

2016-03-03 Thread Tom Hendrikx
: chown spamuser:wheel chmod 0660 Then restart spamd and see of it doesn't complain. This should allow access for spamd and for users in the wheel group (administrative accounts). Regards, Tom On 03-03-16 16:35, Robert Chalmers wrote: > ok, I can see that. Interesting I mis

Re: Missed spam, suggestions?

2016-02-29 Thread Tom Hendrikx
; The only thing I’ve been contemplating is a local spamtrap and DNSBL. > We have a site that’s regularly trawled for email addresses, so > seeding it should not be too difficult… > Hi, You want to give the RBLs a bit more time to kick in, you could consider greylisting (or postscreen after-220 checks which also cause a delay and a retry). Regards, Tom

Re: Removing markup

2016-02-02 Thread Tom Hendrikx
ing list. IMHO, removing the markup is simply not a good idea: probably easier to use headers only (i.e. no subject tagging), and then use IMAP flags to highlight spam messages for the user. These can be unset later without 'nasty' tricks. Regards, Tom -BEGIN PGP SIGNATURE---

Re: FSL_HELO_BARE_IP_2 fires on wrong header

2016-01-26 Thread Tom Hendrikx
On 26-01-16 10:33, Reindl Harald wrote: > > > Am 26.01.2016 um 09:45 schrieb Tom Hendrikx: >> On 25-01-16 16:38, Reindl Harald wrote: >>> >>> Am 25.01.2016 um 16:22 schrieb Matus UHLAR - fantomas: >>>> On 25.01.16 15:17, Reindl Harald wrote: >&

Re: FSL_HELO_BARE_IP_2 fires on wrong header

2016-01-26 Thread Tom Hendrikx
ed an upgrade. In any way, it would be interesting to see what type of ham mail triggers such a rule when masscheck allows such a high score, before starting an argument about it. Regards, Tom

Re: My new method for blocking spam - example

2016-01-20 Thread Tom Hendrikx
am#content _tokenizing In general, OSB gave the best results IIRC. Regards, Tom -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJWn/kZAAoJEJPfMZ19VO/1JnMP/j7DCm1frjbJZy/uhyEZzskQ +o010elBUdzubXgW0QIaHdxvkbbPgyu6yyEZHe/lj04h/vMgRmFHjbAWo+ZF1DZX rjt2Aa85fLtoAxKojZjh/df

Re: SPF rules and my domain

2015-12-09 Thread Tom Hendrikx
d is correct, so for messages that fail my own SPF record, I want a stricter policy (i.e. a higher score, or a plain reject). If this is what you mean, then a meta rule that combines your envelope sender domain with SPF_FAIL would be a correct solution. Or you could add something like below, which adds a penalty for *all* messages using your domain, and SPF saves the real ones. whitelist_from_spf: *@example.tld (your domain) header Return-Path =~ example.tld Regards, Tom

Re: question re/ RDNS_NONE

2015-11-24 Thread Tom Hendrikx
Thank you both, please stop this pissing contest. On 24-11-15 12:35, Reindl Harald wrote: > > > Am 24.11.2015 um 12:29 schrieb Benny Pedersen: >> Reindl Harald skrev den 2015-11-24 11:56: >> >>> it's the exim of the ISP >> >> with old version of exim > > it's still the exim of the ISP > >>>

Re: SPAM from our own domain

2015-09-28 Thread Tom Robinson
bles like > SMPTMAILFROM > and SMTPRCPTTO and either does nothing or outputs a single line of text like > E550 your mail is not welcome. Go away Nobody should be sending from a different mail server. We use IMAPS and authenticated SMTPS for external users (mobiles, laptops, etc.). Thanks, Tom signature.asc Description: OpenPGP digital signature

Re: SPAM from our own domain

2015-09-27 Thread Tom Robinson
Hi Benny, thanks for your email. On 28/09/15 13:29, Benny Pedersen wrote: > Tom Robinson skrev den 2015-09-28 05:02: > >> From tena...@qka.com Thu Sep 24 13:29:50 2015 > > is this the envelope sender domain ? I believe so. How can I be sure? > >> From:

SPAM from our own domain

2015-09-27 Thread Tom Robinson
, Tom From tena...@qka.com Thu Sep 24 13:29:50 2015 MIME-Version:1.0 X-Spam-Status:No, hits=2.8 required=5.0 X-MS-Exchange-Organization-Authsource:ga8r9nl0j6u7...@motec.com.au Content-Type:multipart/mixed; boundary="=_Next_54920_1367254513.7341918864818"

Re: URIDNSBL but with full URL

2015-09-02 Thread Tom Hendrikx
implemented this at my previous $workjob, using a webservice in stead of a DNSBL, and limiting the amount of requests by selecting a max of 10 URLs picked randomly from the message. Client-side performance was OK, but the dataset in the BL was meager, making the test results not very useful. Using a DNSBL in stead of a webservice should be fairly easy, by using a hash values of the URIs in stead of the URI itself; I've seen implementations of that technique before. Regards, Tom

Re: phishing rules

2015-08-25 Thread Tom Hendrikx
noob. I have no recent experience with MailChimp and friends, but I hope they're educating users to use the GOOD version. So a clear spam indicator for me. Regards, Tom

Re: spamassassin detailed logging

2015-06-19 Thread Tom Hendrikx
to hack SA's logging and write out all you want and then filter it out via syslog/regex.. now if that is more efficient I/O-wise I send all my logs to logstash + elasticsearch. Works like a charm, but when there's nothing (message-id, sender recipient(s)) to search on you're still screwed... Tom

Re: SA bayes filter learns ham but no spam

2015-06-17 Thread Tom Hendrikx
. Regards, Tom

Re: DMARC validation failed

2015-05-22 Thread Tom Hendrikx
for valid results, and has no safety net for temporary errors... Tom -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCAAGBQJVX7BLAAoJEJPfMZ19VO/1uBgQALspECJCWAHO6YGuwtFnKtDv GGEYlIT2E5KNH07HlIk70BzLFlhqgCa4ymKcSdSBkVtVHQK7FlEYjxkFJ0yOyhhj lm8sd2f0tVJvlfRK

AWL defeating my SPAM classification

2015-04-29 Thread Tom Robinson
Hi, Below is the source from an email that is clearly spam but the AWL is -1.3 defeating the spam classification. How can I best adjust the AWL to get this classified as SPAM. Kind regards, Tom -- Tom Robinson IT Manager/System Administrator MoTeC Pty Ltd 121 Merrindale Drive Croydon

Re: AWL defeating my SPAM classification

2015-04-29 Thread Tom Robinson
On 30/04/15 09:56, Marieke Janssen wrote: Hi, Besides your awl problem, you have other problems. 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See

Re: AWL defeating my SPAM classification

2015-04-29 Thread Tom Robinson
On 30/04/15 12:15, Kevin A. McGrail wrote: On 4/29/2015 10:10 PM, Tom Robinson wrote: I have the mail server and a separate name server set up in a DMZ. The name server already runs as a caching nameserver but does forwarding to our ISP. Hi Tom, Your ISP is doing too many queries

Re: AWL defeating my SPAM classification

2015-04-29 Thread Tom Robinson
Tom Robinson IT Manager/System Administrator MoTeC Pty Ltd 121 Merrindale Drive Croydon South 3136 Victoria Australia T: +61 3 9761 5050 F: +61 3 9761 5051 E: tom.robin...@motec.com.au On 30/04/15 10:10, Benny Pedersen wrote: Tom Robinson skrev den 2015-04-30 01:38: 0.0 URIBL_BLOCKED

Re: AWL defeating my SPAM classification

2015-04-29 Thread Tom Robinson
On 30/04/15 15:09, Reindl Harald wrote: Am 30.04.2015 um 04:10 schrieb Tom Robinson: Is it correct that currently, because I'm forwarding, the DNSBL query is denied because the DNSBL server thinks I'm the ISP making a query? Sorry, I'm not understanding the mechanism it is the ISP making

OT: spamassassin SMS

2015-04-16 Thread Tom Kinghorn
Hi List Sorry to post here with this. Does anyone know if its possible to use Spamassassin for SMS filtering? The powers that be are looking for a spam solution for the SMSC and asked if SA is an option. I have advised NO but thought I would ask the list for idea's Many thanks T

Re: Rejecting without backscatter (was Re: Spamassassin not catching spam (Follow-up))

2015-03-26 Thread Tom Hendrikx
the machine accepts both addresses, but rejects at end-of-data. Harald, if one of the used recipient addresses accepts all spam messages (all_spam_to), you should have one copy of the message, right? Could you share the result of my test with us? Kind regards, Tom -BEGIN PGP SIGNATURE

Re: spamass filter blocked yahoo, but why?

2015-03-13 Thread Tom Hendrikx
information. Like all bothers, this is a risky assumption. Change the milter decision to HOLD the message in stead of rejecting, and inspect it after arrival. Tom

Re: Lots of Polish spam

2015-02-24 Thread Tom Hendrikx
you don't even understand is a lot harder. Tom -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCAAGBQJU7PebAAoJEJPfMZ19VO/14HAP/A57vNLDgHjmt0JvBi98RAnY Jez138atfRynhLIFxy2w8MDwWy2HWSi6v/NpnXMVjZ2DYmyMBrJNC1Tn2aYrM3Mu uxPxfOTVNlyG2FjY3iw8XwvlSJ28shcuU8WrbTrvvD81Mv2UyBVhsaNcFNNss5Gg

Re: Amazon phishing spam

2015-02-15 Thread Tom Hendrikx
USER_IN_WHITELIST in my logs. No blacklist entries here, so grep your own logs or headers. Tom -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCAAGBQJU4Q/oAAoJEJPfMZ19VO/1duYP/0dvfCGym4EKenWGNnD+7ry9 5M0OEp/b21xKZKc7bDMhP0mKWCEy8XM2jWP8IdDV8E2pgkkQ2ml0ClSX5uh02BVn I73Rt9a8GE940VVq6ZMo7WEdaIS

Re: regex: chars to escape bsides @

2015-01-04 Thread Tom Hendrikx
while both where present and so it looks the whole rule enigne is going crazy because one unescaped @ If you add custom rule that don't pass a lint test, you pretty much screwed it up yourself. You can't blame spamassassin for that. Regards, Tom -BEGIN PGP SIGNATURE- Version

Re: Can't change SpamAssassin score without enabling the Spam Auto-Delete function

2014-12-15 Thread Tom Hendrikx
editing. Kind regards, Tom -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBCAAGBQJUj0ErAAoJEJPfMZ19VO/1UBkQAMH9iUJBMnoU30UmH142IrYQ Hdh/8CzS77kNHJ/P4vslFDumHca6vLVhEEc8tivLa0OlPl5gs7d0jOEmyDP5XWdq +B6OUZIiwhsDfmKzT2FiO8xxw2JK4qwC+CDae0K+ul+SLOz9mbhuDWg+GamvuqmK yoVu4tWkKQ4Kl

Re: SOUGHT 2.0 ?

2014-11-13 Thread Tom Johnson
We (MailRoute) would be happy to pitch in. We can host mirrors in a couple of datacenters (Los Angeles and Chicago). And we'll help out wherever else we can. Tom

Scoring numbers explained

2014-11-11 Thread Tom Robinson
anywhere. Please help. Regards, Tom signature.asc Description: OpenPGP digital signature

Re: Scoring numbers explained

2014-11-11 Thread Tom Robinson
On 12/11/14 09:45, Reindl Harald wrote: Am 11.11.2014 um 23:41 schrieb Tom Robinson: Hopefully someone can answer this simply with a link to the right documentation. I want to adjust the score on a test but I have no idea what the four numbers actually are. e.g. score

Re: 23_bayes_ignore_header.cf

2014-10-15 Thread Tom Hendrikx
to a config file too: one tuneable (and one location to look at) is better than two. Besides, the config file is far easier to read for the not so regex-capable admin :) Regards, Tom signature.asc Description: OpenPGP digital signature

Re: 23_bayes_ignore_header.cf

2014-10-14 Thread Tom Hendrikx
of tokens over the time? Or it is a good machine that is rooted, and then cleaned up and restored to business by its whitehat admin. But it still is blocked by your self-inflicted 'bayes poison' :) Use rbls for ip-based reputation, not bayes. Tom signature.asc Description: OpenPGP digital

Re: Output of sa-learn --dump magic

2014-10-05 Thread Tom Hendrikx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 02-10-14 12:38, Axb wrote: On 10/02/2014 11:13 AM, Tom Hendrikx wrote: Hi, I am using dspam besides spamassassin, and am interested in comparing the bayesian data between the two. Dspam reports statistics that include somewhat standardised

Output of sa-learn --dump magic

2014-10-02 Thread Tom Hendrikx
it be possible to show these in the sa-learn output? Kind regards, Tom signature.asc Description: OpenPGP digital signature

Re: How to report spam to mailspike

2014-09-09 Thread Tom Hendrikx
money to get delisted. If you decide that you don't like a list because it doesn't accept user submissions, that's your opinion of course. But not very strong one, IMHO: Spamhaus also doesn't accept user submissions, and they run lists that are used by virtually everyone. Regards, Tom

Re: Large commented out body HTML causing SA to timeout/give up/allow spam

2014-09-05 Thread Tom Hendrikx
). In the end we settled with a 4M limit. Never seen any timeout (or other) issues with larger files, but it didn't matter: there was no significant traffic above that limit. Tom signature.asc Description: OpenPGP digital signature

Re: Spam relayed through trendmicro?

2014-08-25 Thread Tom Hendrikx
On 08/25/2014 04:51 AM, Alex wrote: Hi all, I'm having difficulty understanding this one: http://pastebin.com/LYJVas5e It looks like a host in Japan relayed this message through a few systems within trendmicro.com http://trendmicro.com, then on to our system before being tagged as

Re: Spam Assassin - does it work or not?

2014-08-11 Thread Tom Hendrikx
, for all I can see. That does not say much about Lunarpages support, who only are trying to dodge your questions in stead of pointing you to the documentation on how to configure your MUA. Tom signature.asc Description: OpenPGP digital signature

Bareword found where operator expected at /usr/local/bin/sa-heatu line 227, near s/... //r

2014-06-12 Thread Tom Robinson
? Kind regards, Tom -- Tom Robinson IT Manager/System Administrator MoTeC Pty Ltd 121 Merrindale Drive Croydon South 3136 Victoria Australia T: +61 3 9761 5050 F: +61 3 9761 5051 E: tom.robin...@motec.com.au signature.asc Description: OpenPGP digital signature

Re: SPAM from a registrar

2014-06-07 Thread Tom Hendrikx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 05-06-14 20:54, Andreas Schulze wrote: Tom Hendrikx: but postfix has a feature that can check the MX and NS records of the envelope sender or hostname of the connecting ip. I know and use that. If these are all the same, you could block

Rule updates?

2014-05-22 Thread Tom Hendrikx
can assist with? Regards, Tom signature.asc Description: OpenPGP digital signature

Re: Rule updates?

2014-05-22 Thread Tom Hendrikx
On 05/22/2014 03:36 PM, Kevin A. McGrail wrote: On 5/22/2014 9:04 AM, Tom Hendrikx wrote: After checking the results of sa-update and doing some manual dns queries, it seems that last rule updates were done more than a month ago. This used to be an almost daily process, even when there were

Re: SPAM from a registrar

2014-05-16 Thread Tom Hendrikx
.html#smtpd_client_restrictions, especially the check_*_mx_access and check_*_ns_access directives. Tom -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJTdlmZAAoJEJPfMZ19VO/1OCwQAN1yS5CAyOJAeYnzbiNAwbmP

Re: Are messages bypassing Spamassassin checks? Why?

2014-05-11 Thread Tom Hendrikx
it was stored by cyrus. You seem to use 2 hosts, be sure to get full logging from both inet08.hamilton.harte-lyne.ca and inet07.hamilton.harte-lyne.ca Tom On 11-05-14 21:26, James B. Byrne wrote: CentOS-6.5 Postfix-2.6.6 Amavisd-new-2.8.0 Spamassassin-3.3.1 OpenDKIM-2.9.0 pypolicyd-spf-1.2 We use

Re: Plans for a DMARC plugin ???

2014-04-30 Thread Tom Hendrikx
sending, which is an important part of DMARC. Regards, Tom signature.asc Description: OpenPGP digital signature

  1   2   3   4   >