Re: Detecting Valid Message Replies

2017-01-03 Thread RW
On Tue, 3 Jan 2017 17:30:39 +0100 Reindl Harald wrote: > Am 03.01.2017 um 17:20 schrieb RW: > > In practice all you need to do is use a different domain or > > sub-domain in the Message-ID, one that's never used in email > > addresses. Unless you are a large service provider it's unlikely to > >

Re: Detecting Valid Message Replies

2017-01-03 Thread mattg
On 1/3/2017 12:17 PM, Dave Funk wrote: > That would make the wrong decision in the following scenario: Well it's not my decision. I was simply pointing out, as you are, that merely keeping track of outgoing messages IDs, and blacklisting based on unknown message IDs, is prone to problems. You

Re: Detecting Valid Message Replies

2017-01-03 Thread Dave Funk
On Tue, 3 Jan 2017, ma...@assembly.state.ny.us wrote: On 1/3/2017 8:12 AM, Christoffer G. Thomsen wrote: blacklist or increase score for mails that reply to unknown message IDs. Remember that someone out in the world might do a "Reply all" to a message which was also Cc'd to one of your

Re: Detecting Valid Message Replies

2017-01-03 Thread Ian Zimmerman
On 2017-01-03 13:47, Antony Stone wrote: > Given the increasing usage of Google-based business email services > (and others, similar), wouldn't that tend to prevent you being able to > manipulate the Message-ID header, because you are no longer in charge > of the outbound server used by senders

Re: Detecting Valid Message Replies

2017-01-03 Thread RW
On Tue, 3 Jan 2017 19:11:35 +0800 Rob Gunther wrote: > The other day I was thinking it would be cool if you could detect > legitimate replies to mail I send. > > Everyone gets spam with subjects like this: > > Re: some type of trash subject > > Obviously those are not replies to a message you

Re: Detecting Valid Message Replies

2017-01-03 Thread mattg
On 1/3/2017 8:12 AM, Christoffer G. Thomsen wrote: > blacklist or increase score for mails that reply to unknown > message IDs. Remember that someone out in the world might do a "Reply all" to a message which was also Cc'd to one of your users. This would show up as an unknown message ID. Of

Re: Detecting Valid Message Replies

2017-01-03 Thread Christoffer G. Thomsen
On 2017-01-03 12:11, Rob Gunther wrote: > Has anyone ever seen anything like that before for SA? Does it exist > already or any type of plugin etc? It's not SpamAssassin, but Rspamd (https://rspamd.com/) has a plugin called 'replies' that stores message IDs of outgoing mails in Redis. If an

Re: Detecting Valid Message Replies

2017-01-03 Thread Antony Stone
On Tuesday 03 January 2017 at 12:11:35, Rob Gunther wrote: > The other day I was thinking it would be cool if you could detect > legitimate replies to mail I send. > I came up with a concept called 'Authenticated Reply Detection'. > > It uses the Message-ID header to encode some information

Re: Detecting Valid Message Replies

2017-01-03 Thread Kevin A. McGrail
On January 3, 2017 6:11:35 AM EST, Rob Gunther wrote: >The other day I was thinking it would be cool if you could detect >legitimate replies to mail I send. > >Everyone gets spam with subjects like this: > >Re: some type of trash subject > >Obviously those are not replies to a