On 12.04.10 12:38, Carlos Mennens wrote:
On my Postfix server, when my co-workers VPN from their laptops from
home, they then send mail via Outlook and their ISP IP address.
If they send mail from your domain, they should always send it through your
server (not their actusl ISPs), using SMTP
On Mon, 2010-04-12 at 19:30 -0400, Jason Bertoch wrote:
On 4/12/2010 4:58 PM, Martin Gregorie wrote:
I had quite a bit to do with phone numbers en mass a while back. My
initial reaction is that its not easy: not only do phone numbers vary in
length between locales, but even such things as
Hi.
__TO_EQ_FROM_1 and _2 in 72_matching.cf triggers on emails where To:
isn't the same as From: in certain conditions.
If the first of these headers only has an addr-spec and not
[display-address] angle-addr (according to RFC 2822), the regexp
matches the last character of the addr-spec. If
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello
i could use some help to understand a failed SPF check ..
SPF record for Domain isrigb.co.uk is v=spf1 mx a:mail.isrigb.co.uk -all
mail was send from 82.70.121.82, which points to mail.isrigb.co.uk, and
FAILED?
Debug Log..
Patrick,
i could use some help to understand a failed SPF check ..
SPF record for Domain isrigb.co.uk is v=spf1 mx a:mail.isrigb.co.uk -all
Irrelevant. The SPF record in question is:
$ host -t txt mail.isrigb.co.uk
mail.isrigb.co.uk descriptive text v=spf1 mx -all
mail was send from
On Tue, 13 Apr 2010 14:36:12 +0200
Mark Martinec mark.martinec...@ijs.si wrote:
Patrick,
i could use some help to understand a failed SPF check ..
SPF record for Domain isrigb.co.uk is v=spf1 mx
a:mail.isrigb.co.uk -all
Irrelevant. The SPF record in question is:
$ host -t txt
On 4/12/10 4:55 PM, Micah Anderson wrote:
I'm getting a lot of these log entries ever since I've upgraded:
Apr 9 22:31:14 spamd2 spamd[2774]: dcc: [26896] terminated: exit 241
what version of dcc are you running?
what did you upgrade?
--
Michael Scheidell, CTO
Phone: 561-999-5000, x
On Mon, 12 Apr 2010, Ted Mittelstaedt wrote:
Seriously, you shouldn't be asking that question. The fundamental flaw
here is in the assumption that an all-number mailbox user ID is virtually
certain to be spam. It is not. Clearly, the default score assignment to
that rule is too high.
On Tue, 13 Apr 2010, Christer Boräng wrote:
__TO_EQ_FROM_1 and _2 in 72_matching.cf triggers on emails where To:
isn't the same as From: in certain conditions.
Thanks, I'll take a look at those.
--
John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
jhar...@impsec.org
Hello RW,Hi Mark,
thanks for your time.
SPF_HELO_FAIL and SPF_FAIL both hit!
Do SPF_FAIL hit, because of SPF_HELO_FAIL or the existing SPF record of
mail.isrigb.co.uk ?
RW schrieb:
On Tue, 13 Apr 2010 14:36:12 +0200
Mark Martinec mark.martinec...@ijs.si wrote:
Patrick,
i could use
On Tue, 13 Apr 2010, Christer Boräng wrote:
__TO_EQ_FROM_1 and _2 in 72_matching.cf triggers on emails where To:
isn't the same as From: in certain conditions.
If the first of these headers only has an addr-spec and not
[display-address] angle-addr (according to RFC 2822), the regexp
matches
On Tue, 2010-04-13 at 09:39 -0400, Charles Gregory wrote:
I would PROPOSE (to those with a nice testing rig) that the rule be
modified so that there has to be at least one non-numeric character after
the initial first 6 digits ie. /^\d{6,}\S*[^\d\s]\S*@/
I'm wondering why exactly six
On Tue, 13 Apr 2010, Martin Gregorie wrote:
header FROM_STARTS_WITH_NUMS From =~ /\d{6,}[a-z._-][a-z0-9._-]{0,50}@/i
This regex requires that the 7th character be non-numeric.
Look at the regex I posted It covers all cases with six leading
digits that is not a purely numeric address.
Hi all ,
I recently upgraded to sa-3.3.0 and I think my blacklists aren't working, I'm
getting nailed from servers around the globe that are on the DNSBL list, I did
run sa-update after the upgrade
How can I confirm that the BL rules are working
From: Jean-Paul Natola [mailto:jnat...@familycareintl.org]
Sent: Tuesday, April 13, 2010 2:05 PM
To: 'users@spamassassin.apache.org'
Subject: accepted connection from DNSBL's
Hi all ,
I recently upgraded to sa-3.3.0 and I think my blacklists aren't
On Tue, 2010-04-13 at 13:05 -0400, Charles Gregory wrote:
On Tue, 13 Apr 2010, Martin Gregorie wrote:
header FROM_STARTS_WITH_NUMS From =~ /\d{6,}[a-z._-][a-z0-9._-]{0,50}@/i
This regex requires that the 7th character be non-numeric.
Nope - only that a character after the first six is a
On 2010/04/13 2:11 PM, Jean-Paul Natola wrote:
... I think my blacklists aren't working...
...I'm getting a bunch of refused too many connections...
It sounds like your hitting a MTA connection limit, which doesn't have
anything to do with blacklists, although I suppose it could also be a
-Original Message-
From: Jason Bertoch [mailto:ja...@i6ix.com]
Sent: Tuesday, April 13, 2010 2:27 PM
To: users@spamassassin.apache.org
Subject: Re: accepted connection from DNSBL's
On 2010/04/13 2:11 PM, Jean-Paul Natola wrote:
... I think my blacklists aren't working...
...I'm
On 2010/04/13 2:38 PM, Jean-Paul Natola wrote:
Well just to confirm I have taken the IP addresses and entered them here
http://www.dnsbl.info/dnsbl-database-check.php
and almost ALL of them are listed in at least 5 of the lists,
this one was on 9 of the lists see below
On Tue, 13 Apr 2010, Martin Gregorie wrote:
header FROM_STARTS_WITH_NUMS From =~ /\d{6,}[a-z._-][a-z0-9._-]{0,50}@/i
This regex requires that the 7th character be non-numeric.
Nope - only that a character after the first six is a legal address
character but non-numeric.
Hmmm My bad.
I
-Original Message-
From: Jason Bertoch [mailto:ja...@i6ix.com]
Sent: Tuesday, April 13, 2010 2:53 PM
To: users@spamassassin.apache.org
Subject: Re: accepted connection from DNSBL's
On 2010/04/13 2:38 PM, Jean-Paul Natola wrote:
Well just to confirm I have taken the IP addresses and
On 2010/04/13 3:30 PM, Jean-Paul Natola wrote:
Ideally, correct me if I'm wrong, wouldn't I want SA to drop the connection
after doing a lookup on the IP or are you saying I should do that on the gateway
SA doesn't have the ability to drop connections. It only scans what is
handed to it.
On Tue, 2010-04-13 at 15:13 -0400, Charles Gregory wrote:
On Tue, 13 Apr 2010, Martin Gregorie wrote:
header FROM_STARTS_WITH_NUMS From =~ /\d{6,}[a-z._-][a-z0-9._-]{0,50}@/i
This regex requires that the 7th character be non-numeric.
Nope - only that a character after the first six is a
On Tue, 2010-04-13 at 17:07 +0100, Martin Gregorie wrote:
header FROM_STARTS_WITH_NUMS From =~ /\d{6,}[a-z._-][a-z0-9._-]{0,50}@/i
Why not limit it to the address part only? That RE matches against the
real name, too. This feels overly complicated anyway, to express starts
with numbers, but does
On 4/13/2010 3:30 PM, Jean-Paul Natola wrote:
--
var/log/exim/mainlog:2010-04-13 14:24:17 Connection from [110.139.156.19]
refused: too many connections
/Jason Ideally, correct me if I'm wrong, wouldn't I want SA to drop
the connection after doing a lookup on the IP or are you saying
Hi,
I'm having some additional difficulty with body URI rules and hoped
someone could help.
rawbody __BODY_ONLY_URI
/^[^a-z]{0,10}(http:\/\/|www\.)(\w+\.)+(com|net|org|biz|cn|ru)\/?[^
]{0,20}[a-z]{0,10}$/msi
This doesn't seem to catch a quoted-printable body and I can't figure
out how to
26 matches
Mail list logo
