Spamreport plugin for email clients

2012-09-10 Thread Ram
When I ask users to send misclassified mails ( FN or FP ) as an attachment , they often dont get it right. Also attaching from outlook , windows live mail etc is a big pain Is there an outlook plugin people can use to report spam , that can come to a URL or by mail ? Thanks Ram

Re: Spamreport plugin for email clients

2012-09-10 Thread Axb
On 09/10/2012 01:01 PM, Ram wrote: When I ask users to send misclassified mails ( FN or FP ) as an attachment , they often dont get it right. Also attaching from outlook , windows live mail etc is a big pain Is there an outlook plugin people can use to report spam , that can come to a URL or

Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Hi, Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally and forwarded to SA. The mailrelays of the external provider are listed in

Re: Spamreport plugin for email clients

2012-09-10 Thread Dave Warren
On 9/10/2012 1:01 PM, Ram wrote: When I ask users to send misclassified mails ( FN or FP ) as an attachment , they often dont get it right. Also attaching from outlook , windows live mail etc is a big pain Is there an outlook plugin people can use to report spam , that can come to a URL or

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread John Hardin
On Mon, 10 Sep 2012, Helmut Schneider wrote: Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally and forwarded to SA. The mailrelays of the

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Dave Funk
On Mon, 10 Sep 2012, John Hardin wrote: On Mon, 10 Sep 2012, Helmut Schneider wrote: Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally

Re: Spamreport plugin for email clients

2012-09-10 Thread Kris Deugau
Ram wrote: When I ask users to send misclassified mails ( FN or FP ) as an attachment , they often dont get it right. Also attaching from outlook , windows live mail etc is a big pain Outlook is not Windows Live Mail. Backend code rewrites notwithstanding, Windows Live Mail (Windows

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Kris Deugau
Dave Funk wrote: If he's got his trusted_networks configured correctly (has his MX/relays listed) shouldn't that take care of the problem? It looks like RCVD_IN_DNSWL_MED examines firstuntrusted and if he trusts his MX/relays correctly then this shouldn't be happening. Yes, exactly. We

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
John Hardin wrote: On Mon, 10 Sep 2012, Helmut Schneider wrote: Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally and

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Dave Funk wrote: On Mon, 10 Sep 2012, John Hardin wrote: On Mon, 10 Sep 2012, Helmut Schneider wrote: Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Kris Deugau
Helmut Schneider wrote: If I understood you correctly I'd need to add all relays of MessageLabs to trusted_networks and also track any IP address changes... If you're using them as your primary spam filter provider, you should have information somewhere on which IP block(s) your mail will go

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Matthias Leisi
On Mon, Sep 10, 2012 at 8:34 PM, Helmut Schneider jumpe...@gmx.de wrote: It looks like RCVD_IN_DNSWL_MED examines firstuntrusted and if he trusts his MX/relays correctly then this shouldn't be happening. In general, setting up the trustpath correctly is sufficient. If I understood you

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Kris Deugau wrote: Helmut Schneider wrote: If I understood you correctly I'd need to add all relays of MessageLabs to trusted_networks and also track any IP address changes... If you don't have that info, and their support refuses to tell you, tailing your inbound logs for a while

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Matthias Leisi wrote: On Mon, Sep 10, 2012 at 8:34 PM, Helmut Schneider jumpe...@gmx.de wrote: It looks like RCVD_IN_DNSWL_MED examines firstuntrusted and if he trusts his MX/relays correctly then this shouldn't be happening. In general, setting up the trustpath correctly is

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Helmut Schneider wrote: Kris Deugau wrote: Helmut Schneider wrote: but if their support refuses to tell you, I'd be looking at switching providers I guess they would if they knew themselves. But project switch is ongoing... :)

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Noel Butler
On Mon, 2012-09-10 at 18:34 +, Helmut Schneider wrote: If I understood you correctly I'd need to add all relays of MessageLabs to trusted_networks and also track any IP address changes... I wouldn't. I've seen multiple spam from messagelabs signature.asc Description: This is a

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread John Hardin
On Tue, 11 Sep 2012, Noel Butler wrote: On Mon, 2012-09-10 at 18:34 +, Helmut Schneider wrote: If I understood you correctly I'd need to add all relays of MessageLabs to trusted_networks and also track any IP address changes... I wouldn't. I've seen multiple spam from messagelabs

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Dave Pooser
On 9/10/12 7:36 PM, Noel Butler noel.but...@ausics.net wrote: I wouldn't. I've seen multiple spam from messagelabs As I understand it, trusted_networks doesn't mean networks you trust not to send spam; rather, it means networks you trust not to have forged their Received: headers. Adding the