Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-19 Thread Kris Deugau
Philip Prindeville wrote: I'd rather suffer a few broken applications, or in this case, a user having to cut a domain name out of an email and paste it into a web browser and not be able to simply click through the message body, if it helps maintain the clear distinction between well-formed

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-18 Thread Philip Prindeville
Matt Kettler wrote: Philip Prindeville wrote: Matt Kettler wrote: Philip Prindeville wrote: Matt Kettler wrote: Philip Prindeville wrote: Depends on whether you equate bare domains with URL's, I suppose. If MUA's equate them with URLs, spammers will use this, and SpamAssassin will use

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-18 Thread Karsten Bräckelmann
On Mon, 2008-02-18 at 09:51 -0800, Philip Prindeville wrote: Daryl C. W. O'Shea wrote: Philip Prindeville wrote: Yeah, I'll talk to the Outlook folks, and file a bug against Thunderbird... (I think the latter only does it to be compatible with the former...) Yeah, good luck with

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-18 Thread Philip Prindeville
Daryl C. W. O'Shea wrote: Philip Prindeville wrote: There is an RFC that defines what a URL looks like. A bare domain doesn't cut it. You want to forbid bare domains in email? Go ahead. You can forbid anything you like. I don't, and I doubt Matt wants to either. But don't

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-18 Thread Justin Mason
Karsten =?ISO-8859-1?Q?Br=E4ckelmann?= writes: On Mon, 2008-02-18 at 09:51 -0800, Philip Prindeville wrote: Daryl C. W. O'Shea wrote: Philip Prindeville wrote: Yeah, I'll talk to the Outlook folks, and file a bug against Thunderbird... (I think the latter only does it to be

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-17 Thread Michael Scheidell
From: Philip Prindeville [EMAIL PROTECTED] Date: Sat, 16 Feb 2008 18:44:55 -0800 To: Spamassassin Mailing List users@spamassassin.apache.org Subject: Clearly bogus false positives -- on abuse contact point, no less Hmmm. I think we need a BL for reporting ISP's that are clueless

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-17 Thread Matt Kettler
Philip Prindeville wrote: Karsten Bräckelmann wrote: Please, do not paste a gigantic blob of multipart MIME messages. Put it up somewhere, raw, and simply provide a link. On Sat, 2008-02-16 at 18:44 -0800, Philip Prindeville wrote: Anyway, I have no idea why I'm seeing some of these scores.

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-17 Thread Matt Kettler
Michael Scheidell wrote: From: Philip Prindeville [EMAIL PROTECTED] Date: Sat, 16 Feb 2008 18:44:55 -0800 To: Spamassassin Mailing List users@spamassassin.apache.org Subject: Clearly bogus false positives -- on abuse contact point, no less Hmmm. I think we need a BL for reporting ISP's

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-17 Thread Philip Prindeville
Matt Kettler wrote: Philip Prindeville wrote: Karsten Bräckelmann wrote: Please, do not paste a gigantic blob of multipart MIME messages. Put it up somewhere, raw, and simply provide a link. On Sat, 2008-02-16 at 18:44 -0800, Philip Prindeville wrote: Anyway, I have no idea why I'm seeing

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-17 Thread Matt Kettler
Philip Prindeville wrote: Matt Kettler wrote: Philip Prindeville wrote: Depends on whether you equate bare domains with URL's, I suppose. If MUA's equate them with URLs, spammers will use this, and SpamAssassin will use it. There is only so much braindeath in UA's that you can bend the

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-17 Thread Philip Prindeville
Matt Kettler wrote: Philip Prindeville wrote: Matt Kettler wrote: Philip Prindeville wrote: Depends on whether you equate bare domains with URL's, I suppose. If MUA's equate them with URLs, spammers will use this, and SpamAssassin will use it. There is only so much braindeath in UA's

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-17 Thread Daryl C. W. O'Shea
Philip Prindeville wrote: There is an RFC that defines what a URL looks like. A bare domain doesn't cut it. You want to forbid bare domains in email? Go ahead. You can forbid anything you like. I don't, and I doubt Matt wants to either. But don't call it a test for URL's, since it's

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-17 Thread Matt Kettler
Philip Prindeville wrote: Matt Kettler wrote: Philip Prindeville wrote: Matt Kettler wrote: Philip Prindeville wrote: Depends on whether you equate bare domains with URL's, I suppose. If MUA's equate them with URLs, spammers will use this, and SpamAssassin will use it. There is only so

Clearly bogus false positives -- on abuse contact point, no less

2008-02-16 Thread Philip Prindeville
Hmmm. I think we need a BL for reporting ISP's that are clueless as to run filtering on their abuse mailbox (or the mailbox that's listed for their ARIN/RIPE AbuseEmail attributes). Anyway, I have no idea why I'm seeing some of these scores. URL matches when there aren't even URL's in my

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-16 Thread Karsten Bräckelmann
Please, do not paste a gigantic blob of multipart MIME messages. Put it up somewhere, raw, and simply provide a link. On Sat, 2008-02-16 at 18:44 -0800, Philip Prindeville wrote: Anyway, I have no idea why I'm seeing some of these scores. URL matches when there aren't even URL's in my

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-16 Thread Philip Prindeville
Karsten Bräckelmann wrote: Please, do not paste a gigantic blob of multipart MIME messages. Put it up somewhere, raw, and simply provide a link. On Sat, 2008-02-16 at 18:44 -0800, Philip Prindeville wrote: Anyway, I have no idea why I'm seeing some of these scores. URL matches when there

Re: Clearly bogus false positives -- on abuse contact point, no less

2008-02-16 Thread hamann . w
Karsten Bräckelmann wrote: On Sat, 2008-02-16 at 18:44 -0800, Philip Prindeville wrote: Anyway, I have no idea why I'm seeing some of these scores. URL matches when there aren't even URL's in my message? .. What should I do? Just block their domain? I don't want to deal