Re: FROMNAME and PDS_FROM_2_EMAILS

2021-05-08 Thread Greg Troxel
Alex writes: > And I would assume it would be DKIM for differences between the > address in the From and the SPF record for the envelope sender, > correct? No. DKIM is a way for an MTA, generally the originating MTA, to sign a message with a key belonging to a domain. A verifier looks up

Re: How do I search and capture text for use in a rule?

2021-05-08 Thread Loren Wilton
I think the OP was trying to find a way to match "To: " to "Hi user". Loren

Re: FROMNAME and PDS_FROM_2_EMAILS

2021-05-08 Thread John Hardin
On Sun, 9 May 2021, RW wrote: PDS_FROM_2_EMAILS is similar to what the plugin does, but it contains exclusions that, amongst other things, reduce matches on mail from actual mail servers. It include "&& !__DKIM_EXISTS", so it's useless in the case where is from an account or mail-system

FROMNAME and PDS_FROM_2_EMAILS

2021-05-08 Thread Alex
Hi, I'm trying to understand the FROMNAME rules and a potential conflict with PDS_FROM_2_EMAILS. I understand FROMNAME_SPOOF is designed to catch differences like: From: "no-re...@amazon.com" but what other spoofs is the FromName.pm plugin designed to catch? And I would assume it would be

Re: How do I search and capture text for use in a rule?

2021-05-08 Thread RW
On Sat, 8 May 2021 16:59:59 +0200 Matus UHLAR - fantomas wrote: > >On Fri, 07 May 2021 10:19:49 -0400 Steve Dondley wrote: > >> I want to extract the first part of an email address from the > >> "Delivered-To" header and use it witin a custom rule. > >> > >> Example pseudo code: > >> > >> my

Re: FROMNAME and PDS_FROM_2_EMAILS

2021-05-08 Thread RW
On Sat, 8 May 2021 17:04:00 -0400 Alex wrote: > Hi, > I'm trying to understand the FROMNAME rules and a potential conflict > with PDS_FROM_2_EMAILS. > > I understand FROMNAME_SPOOF is designed to catch differences like: > > From: "no-re...@amazon.com" > > but what other spoofs is the

Bayes autolearn: how does it resolve whether rules are body or header related?

2021-05-08 Thread Bert Van de Poel
Dear fellow Spamassassin users, I recently noticed that quite a lot of spam emails with high scores weren't marked for Bayes autolearning. While some senders and receivers were a common match, explaining why autolearn was nog, there was no clear explanation for other cases. I therefore put

Re: How do I search and capture text for use in a rule?

2021-05-08 Thread RW
On Fri, 07 May 2021 10:19:49 -0400 Steve Dondley wrote: > I want to extract the first part of an email address from the > "Delivered-To" header and use it witin a custom rule. > > Example pseudo code: > > my ($first_part) = $email_file =~ /^Deliver-To: (.*)/; > > body __LOCAL_AWKWARD_INTRO

Re: How do I search and capture text for use in a rule?

2021-05-08 Thread Matus UHLAR - fantomas
On Fri, 07 May 2021 10:19:49 -0400 Steve Dondley wrote: I want to extract the first part of an email address from the "Delivered-To" header and use it witin a custom rule. Example pseudo code: my ($first_part) = $email_file =~ /^Deliver-To: (.*)/; body __LOCAL_AWKWARD_INTRO /hi $first_part/i

dkim invalid

2021-05-08 Thread Benny Pedersen
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=ijkxnk2qoy5hgyu3k53fikjzn3npdsyu; d=netflix.com; t=1620454169; i=@mailer.netflix.com; h=Date:From:Sender:To:Message-ID:Subject:MIME-Version:Content-Type:List-Unsubscribe;