Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Matus UHLAR - fantomas
On 25.02.10 15:22, Marc Perkel wrote: I'd like to find a way to get people to get their FCrDNS correct. The way I see it if they can't get RDNS correct they aren't going to get SPF correct. Unfortunately I get a lot of ham from IPs with no RDNS. fcrdns can't be used to filter spam because

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Matus UHLAR - fantomas
On 25.02.10 17:08, Marc Perkel wrote: The forward issue is definitely an annoyance. But SPF has a problem in that as the supporters admit, it doesn't block spam, and it can't be used as a white rule because spammers often use SPF correctly. Marc, why are YOU trolling? Are you attempting

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Matus UHLAR - fantomas
LuKreme wrote: Here's where spf is useful. On 25.02.10 15:31, Marc Perkel wrote: Except that it breaks forwarded email. I have never seen any occurence of SPF breaking forwarding. But if you forward e-mail from someone and you are pretending to be him, we may reject it because you are

Is there any Plugin to parse the “quoted email tex t” part in a mail (replied mail part)

2010-02-26 Thread testsubbitesdsffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
Hi Is there any Plugin to parse the “quoted email text” part in a mail (replied mail part) . I read the document that you are performing some test cases against the mail to identify a message is Spam or not. I have noticed Parse “quoted email text” is one test case in your test case list,

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Per Jessen
Matus UHLAR - fantomas wrote: LuKreme wrote: Here's where spf is useful. On 25.02.10 15:31, Marc Perkel wrote: Except that it breaks forwarded email. I have never seen any occurence of SPF breaking forwarding. Really? Do you know which problem SRS was meant to address then? If SPF

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Matus UHLAR - fantomas
LuKreme wrote: Here's where spf is useful. On 25.02.10 15:31, Marc Perkel wrote: Except that it breaks forwarded email. Matus UHLAR - fantomas wrote: I have never seen any occurence of SPF breaking forwarding. On 26.02.10 09:46, Per Jessen wrote: Really? Do you know which problem

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Mike Cardwell
On 25/02/2010 23:31, Marc Perkel wrote: As someone who forwards email what I see is this. Sender has restrictive SPF. Recipient server enforces SPF. Mail coming through me bounces. Then they call me to complain and I say, I didn't bounce it. Get rid of your SPF nd your email will be received.

RE: Off Topic - SPF - What a Disaster

2010-02-26 Thread Rick Cooper
Original Message From: Marc Perkel [mailto:m...@perkel.com] Sent: Thursday, February 25, 2010 6:11 PM To: Rick Cooper Cc: 'ram'; users@spamassassin.apache.org Subject: Re: Off Topic - SPF - What a Disaster Rick Cooper wrote: The anti-SPF bandwagon is not ego driven but results

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread LuKreme
On 25-Feb-2010, at 18:08, Marc Perkel wrote: it doesn't block spam, But as I said the absence of SPF can be used to block the most harmful and risky of spams. and it can't be used as a white rule because spammers often use SPF correctly. It can't be used INDISCRIMINATELY as a

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread LuKreme
On 26-Feb-2010, at 07:13, LuKreme wrote: SPF_PASS 0.001 SPF_fail 5.0 whitelist_from_spf *...@ebay.com whitelist_from_spf *...@paypal.com -- I WILL NOT AIM FOR THE HEAD Bart chalkboard Ep. 8F13

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Mike Cardwell
On 26/02/2010 14:20, LuKreme wrote: On 26-Feb-2010, at 07:13, LuKreme wrote: SPF_PASS 0.001 SPF_fail 5.0 whitelist_from_spf *...@ebay.com whitelist_from_spf *...@paypal.com You forgot whitelist_from_spf *...@*.apache.org -- Mike Cardwell: UK based IT Consultant, Perl developer, Linux

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread LuKreme
On 25-Feb-2010, at 17:48, Lee Dilkie wrote: One of the problems is that in SA, an SPF_FAIL (hard) doesn't score much above a SPF_SOFTFAIL but in my view it should. If an admin has made the effort to setup a hardfail record, it should be trusted. There are far too many incompetent admins

Re: Off-topic? Off-list!

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, Karsten Bräckelmann wrote: I know I'm tired from repeatedly deleting clearly off-topic posts without even caring to open them. Wonder how the majority of subscribers feels about it. Well, there was a posting with some spam-related SPF stats the other day that proved very

tflags userconf

2010-02-26 Thread Charles Gregory
Hallo! Back on topic :) I happened to notice that 'tflags userconf' was specified for a few tests that, as far as I could tell have on user configurable parameters. Example (3.2.5): 25_spf.cf:tflags SPF_PASS nice userconf So what 'user configuration' is needed for

Re: tflags userconf

2010-02-26 Thread RW
On Fri, 26 Feb 2010 10:20:06 -0500 (EST) Charles Gregory cgreg...@hwcn.org wrote: I happened to notice that 'tflags userconf' was specified for a few tests that, as far as I could tell have on user configurable parameters. Example (3.2.5): 25_spf.cf:tflags SPF_PASS

Re: tflags userconf

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, RW wrote: I'm guessing it's also used to exclude rules from score optimization. There is a comment in 25_spf.cf: # these are userconf so that scores are set by hand tflags SPF_PASS nice userconf net tflags SPF_HELO_PASSnice userconf net Ah. I

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Marc Perkel
Jason Bertoch wrote: On 2/25/2010 8:08 PM, Marc Perkel wrote: The forward issue is definitely an annoyance. But SPF has a problem in that as the supporters admit, it doesn't block spam, and it can't be used as a white rule because spammers often use SPF correctly. I'm not sure what you

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Marc Perkel
Matus UHLAR - fantomas wrote: On 25.02.10 15:22, Marc Perkel wrote: I'd like to find a way to get people to get their FCrDNS correct. The way I see it if they can't get RDNS correct they aren't going to get SPF correct. Unfortunately I get a lot of ham from IPs with no RDNS.

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Marc Perkel
Matus UHLAR - fantomas wrote: LuKreme wrote: Here's where spf is useful. On 25.02.10 15:31, Marc Perkel wrote: Except that it breaks forwarded email. Matus UHLAR - fantomas wrote: I have never seen any occurence of SPF breaking forwarding.

Re: Off-topic? Off-list!

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 09:50 -0500, Charles Gregory wrote: On Fri, 26 Feb 2010, Karsten Bräckelmann wrote: I know I'm tired from repeatedly deleting clearly off-topic posts without even caring to open them. Wonder how the majority of subscribers feels about it. Well, there was a posting

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Marc Perkel
Jason Bertoch wrote: SPF wasn't meant to block spam, please stop asserting that. http://old.openspf.org/howworks.html Quoting the page: And as a user, SPF can help you sort the good from the bad. Reject mail that fails an SPF check.

Re: Is there any Plugin to parse the “quoted email text” part in a mail (replied mail part)

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 14:15 +0530, testsubbitesdsf{82} wrote: Hi Uhm, what's with your real name? (Rewritten in RE style.) How do you pronounce *82* f's in a row? Is there any Plugin to parse the “quoted email text” part in a mail (replied mail part) . I read the document that you are

Re: Bayes and Time of Day

2010-02-26 Thread Karsten Bräckelmann
On Thu, 2010-02-25 at 22:20 -0500, Jason Bertoch wrote: Although I grasp the concept of Bayes in the SA system, I don't fully understand how and which tokens it grabs from mails passed through SA. Although many servers deal with 24-hour customers, mine is 98% business only 8AM to 5PM.

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Benny Pedersen
On Fri 26 Feb 2010 06:50:12 PM CET, Marc Perkel wrote And - SPF was originally introduced as a spam fighting solution. But they backed off when it was clear that it didn't fight spam. alot of lies out there -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Tests just hitting sending domains names?

2010-02-26 Thread Darxus
The majority of spams making it through my filters in the last couple weeks have been (confirmed) delivered by hotmail, *while* I was giving all those emails a +1. I just went over the numbers again and set it to +3. I'm very curious what would happen if a full re-score was done with a test

Re: Is there any Plugin to parse the “quoted ema il text” part in a mail (replied mail part)

2010-02-26 Thread LuKreme
On 26-Feb-10 11:31, Karsten Bräckelmann wrote: Uhm, what's with your real name? (Rewritten in RE style.) How do you pronounce *82* f's in a row? Fff for 8.2 seconds. -- Do not meddle in the affairs of wizards for they are subtle and quick to anger.

Re: Off-topic? Off-list!

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, Karsten Bräckelmann wrote: Don't make me stomp my foot (Homer Simpson). LOL would you believe that someone in my girlfriend's computer class actually *said* to the instructor that famous Homerism, Where is the ANY key? Yes, really. And they are old enough to

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Joseph Brennan
Jason Bertoch ja...@i6ix.com wrote: Every modern mail solution allows an account holder to pop/imap to another account to pull in mail from somewhere else. But this introduces a security hole, where the password to an account on System A is stored on System B. Forwarding avoids that.

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread LuKreme
On 26-Feb-10 11:24, Marc Perkel wrote: Jason Bertoch wrote: SPF wasn't meant to block spam, please stop asserting that. http://old.openspf.org/howworks.html Quoting the page: And as a user, SPF can help you sort the good from the bad. Reject mail that fails an SPF check. And? that's what

What's necessary to get spamassassin --report data to dnswl.org?

2010-02-26 Thread Darxus
Beyond creating the plugin? (Also interested in the --revoke data.) -- Of course there's strength in numbers. But there's strength in sharp weaponry too. Ironically, this lead to what we call 'civilization'. - spore http://www.ChaosReigns.com

Re: Tests just hitting sending domains names?

2010-02-26 Thread LuKreme
On 26-Feb-10 13:42, dar...@chaosreigns.com wrote: The majority of spams making it through my filters in the last couple weeks have been (confirmed) delivered by hotmail, *while* I was giving all those emails a +1. hotmail has always been a massive source of spam; enough so that when anyone

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, Benny Pedersen wrote: On Fri 26 Feb 2010 06:50:12 PM CET, Marc Perkel wrote And - SPF was originally introduced as a spam fighting solution. alot of lies out there Okay, this is getting stupid. Everyone on this thread, go to: http://www.openspf.org/Introduction

Re: Is there any Plugin to parse the “quoted email text” part in a mail (replied mail part)

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, LuKreme wrote: On 26-Feb-10 11:31, Karsten Bräckelmann wrote: Uhm, what's with your real name? (Rewritten in RE style.) How do you pronounce *82* f's in a row? Fff for 8.2 seconds. That's ten fs a second? Wow. Fast little F'er.

Re: What's necessary to get spamassassin --report data to dnswl.org?

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 16:09 -0500, dar...@chaosreigns.com wrote: Beyond creating the plugin? I assume you're talking about reporting abuse? If you actually would go to dnswl.org, you'll see a Report Abuse link right hand, which tells you what's needed. If you want to regularly report spam

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Benny Pedersen
On Thu 25 Feb 2010 10:31:16 PM CET, Kai Schaetzl wrote I don't know to what you disagree, but SPF is not an anti-spam tool. Full stop. oh so what is spf then ? -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Re: What's necessary to get spamassassin --report data to dnswl.org?

2010-02-26 Thread Darxus
On 02/26, Karsten Bräckelmann wrote: I assume you're talking about reporting abuse? If you actually would go to dnswl.org, you'll see a Report Abuse link right hand, which tells you what's needed. No. Matthias (DNSWL) asked me to try to get us included in that process. If I create the

Re: What's necessary to get spamassassin --report data to dnswl.org?

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 16:40 -0500, dar...@chaosreigns.com wrote: On 02/26, Karsten Bräckelmann wrote: I assume you're talking about reporting abuse? If you actually would go to dnswl.org, you'll see a Report Abuse link right hand, which tells you what's needed. No. Matthias (DNSWL)

Re: What's necessary to get spamassassin --report data to dnswl.org?

2010-02-26 Thread Matthias Leisi
Karsten, Am 26.02.10 22:53, schrieb Karsten Bräckelmann: code? Then this would seem to be a general sketch: Write the plugin, while keeping DNSWL tightly in the loop to sync the process. Submit the Actually, Darxus is editor at dnswl.org and contributes a nameserver - he is very much in the

Re: What's necessary to get spamassassin --report data to dnswl.org?

2010-02-26 Thread Darxus
On 02/26, Karsten Bräckelmann wrote: opinions there. If the code and idea is deemed good, eventually sign a CLA (assuming it's a non-trivial change), so the code can be accepted for upstream inclusion. Thanks. I'm looking more for the requirements for the code being accepted into SA. It

Re: What's necessary to get spamassassin --report data to dnswl.org?

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 22:59 +0100, Matthias Leisi wrote: Am 26.02.10 22:53, schrieb Karsten Bräckelmann: code? Then this would seem to be a general sketch: Write the plugin, while keeping DNSWL tightly in the loop to sync the process. Submit the Actually, Darxus is editor at dnswl.org

Re: What's necessary to get spamassassin --report data to dnswl.org?

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 17:09 -0500, dar...@chaosreigns.com wrote: On 02/26, Karsten Bräckelmann wrote: opinions there. If the code and idea is deemed good, eventually sign a CLA (assuming it's a non-trivial change), so the code can be accepted for upstream inclusion. Thanks. I'm looking

Re: Tests just hitting sending domains names?

2010-02-26 Thread Ned Slider
dar...@chaosreigns.com wrote: The majority of spams making it through my filters in the last couple weeks have been (confirmed) delivered by hotmail, *while* I was giving all those emails a +1. I just went over the numbers again and set it to +3. Although it's easy to see the temptation

Re: Tests just hitting sending domains names?

2010-02-26 Thread Darxus
On 02/26, Ned Slider wrote: dar...@chaosreigns.com wrote: The majority of spams making it through my filters in the last couple weeks have been (confirmed) delivered by hotmail, *while* I was giving all those emails a +1. I just went over the numbers again and set it to +3. Although it's

Re: Tests just hitting sending domains names?

2010-02-26 Thread Henrik K
On Fri, Feb 26, 2010 at 05:40:23PM -0500, dar...@chaosreigns.com wrote: On 02/26, Ned Slider wrote: dar...@chaosreigns.com wrote: The majority of spams making it through my filters in the last couple weeks have been (confirmed) delivered by hotmail, *while* I was giving all those emails a