AW: i need to fix this ....

2018-02-06 Thread Maurizio Caloro
Hello Jered Thanks for your answer! # cat /etc/debian_version 8.10 # dpkg -l spamassassin ii spamassassin 3.4.0-6 all Perl-based spam filter using text i doint think that i have mixes releases installed. # cat sources.list #deb cdrom:[Debian GNU/Linux 8.5.0 _

Re: Email filtering theory and the definition of spam

2018-02-06 Thread Rupert Gallagher
Case study... Well-known MTAs and SA itself allow (do not reject, do not flag) e-mails with absent or empty "To" header. If I receive one such snail mail, I know it is not for me, and I know it is unwanted commercial advertisement that fills the mailbox and litters the floor. RFC 822, page 42,

Re: Email filtering theory and the definition of spam

2018-02-06 Thread jdow
On 20180206 16:56, Miles Fidelman wrote: On 2/6/18 2:47 PM, Anne P. Mitchell Esq. wrote: I know the definition of spam is very subjective and dependent on your particular the mail flow along with the expectations of the recipients. Back when I was in-house counsel at MAPS, Paul (Vixie) and

Re: i need to fix this ....

2018-02-06 Thread Jered Floyd
Hi Maurizio, What version of Debian are you running, and which spamassassin package do you have installed? Useful commands: # cat /etc/debian_version # dpkg -l spamassassin If you have mixed releases installed, please also provide the contents of /etc/apt/sources.list. Regards, --Jered

Re: Email filtering theory and the definition of spam

2018-02-06 Thread Miles Fidelman
On 2/6/18 2:47 PM, Anne P. Mitchell Esq. wrote: I know the definition of spam is very subjective and dependent on your particular the mail flow along with the expectations of the recipients. Back when I was in-house counsel at MAPS, Paul (Vixie) and I came up with this definition of spam

i need to fix this ....

2018-02-06 Thread Maurizio Caloro
Hello Please i have here today the messages from Spamassasin, please can you give me here any information how to fix this. r@mail:/etc/spamassassin# spamassassin -lint Feb 7 00:41:47.028 [27945] warn: plugin: failed to parse plugin (from @INC): Can't locate Mail/SpamAssassin/Plugin/Mail

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread RW
On Tue, 6 Feb 2018 11:38:42 -0500 Alex wrote: > On Tue, Feb 6, 2018 at 8:44 AM, David Jones wrote: ustomer's compromised accounts. > > > > Leave out the RCVD_IN_BRBL rule above and change the > > RCVD_IN_BRBL_LASTEXT score to 1.4 to keep things the same. > > If you think the RCVD_IN_BRBL rul

Re: Email filtering theory and the definition of spam

2018-02-06 Thread Anne P. Mitchell Esq.
> > I know the definition of spam is very subjective and dependent on your > particular the mail flow along with the expectations of the recipients. > Back when I was in-house counsel at MAPS, Paul (Vixie) and I came up with this definition of spam: “An electronic message is “spam” IF: (1)

Email filtering theory and the definition of spam

2018-02-06 Thread David Jones
I know the definition of spam is very subjective and dependent on your particular the mail flow along with the expectations of the recipients. On 02/06/2018 02:06 PM, David B Funk wrote: On Tue, 6 Feb 2018, Kris Deugau wrote: Alex wrote: These phishes we've received were all from otherwise t

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread Alex
Hi, >>> whitelist_auth *@bounce.mail.salesforce.com >>> whitelist_auth *@sendgrid.net >>> whitelist_auth *@*.mcdlv.net >> >> >> I've seen enough spam sent through all three - both by way of whole >> apparently spammer-owned accounts and cracked-but-otherwise-legitimate >> accounts - that I would n

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread David B Funk
On Tue, 6 Feb 2018, Kris Deugau wrote: Alex wrote: These phishes we've received were all from otherwise trusted sources like salesforce, amazonses and sendgrid. These are examples that I believe were previously whitelisted because of having received a phish through these systems but have no bee

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread David Jones
On 02/06/2018 01:28 PM, Alex wrote: Hi, ifplugin Mail::SpamAssassin::Plugin::DNSEval header __RCVD_IN_BRBL eval:check_rbl('brbl', 'bb.barracudacentral.org') tflags __RCVD_IN_BRBL net header __RCVD_IN_BRBL_2eval:check_rbl_sub('brbl', '127.0.0.2') meta

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread Kris Deugau
Alex wrote: These phishes we've received were all from otherwise trusted sources like salesforce, amazonses and sendgrid. These are examples that I believe were previously whitelisted because of having received a phish through these systems but have no been disabled. whitelist_auth *@bounce.mail

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread Dave Warren
On 2018-02-05 09:12, Benny Pedersen wrote: Kevin A. McGrail skrev den 2018-02-05 16:53: I don't think that will apply will it because it will be looking up something like 1.2.3.4.bb.barracuda.blah which isn't cached. the first qurry can make a qurry with very low ttl, so it would not be cach

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread Alex
Hi, > ifplugin Mail::SpamAssassin::Plugin::DNSEval > > header __RCVD_IN_BRBL eval:check_rbl('brbl', > 'bb.barracudacentral.org') > tflags __RCVD_IN_BRBL net > > header __RCVD_IN_BRBL_2eval:check_rbl_sub('brbl', > '127.0.0.2') >>>

Re: prevent spamassassin from repeating previous tests

2018-02-06 Thread RW
On Tue, 6 Feb 2018 09:50:13 -0800 (PST) John Hardin wrote: > At present the closest you could get to that is to run two different > SA installs having different rulesets (before and after), but there's > no supported way to have the second pass include the first pass's > score. > Summarizing the

Re: prevent spamassassin from repeating previous tests

2018-02-06 Thread John Hardin
On Tue, 6 Feb 2018, fe...@kngnt.org wrote: Hi everybody, I have a postfix + amavis + dovecot setup, with spamassassin running both as amavis plugin and dovecot "before" stage sieve filter. The reason for this setup is that I want to reject mail that is obviously spam as soon as possible (done

Re: Tone of emails with subject: 'hey'

2018-02-06 Thread Anne P. Mitchell Esq.
Ironically, Gmail's spam filters have filtered every single one of the emails in this thread. :-\ Anne Anne P. Mitchell, Attorney at Law Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal anti-spam law) Legislative Consultant CEO/President, Institute for Social Internet Public Policy L

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread David Jones
On 02/06/2018 10:38 AM, Alex wrote: Hi, On Tue, Feb 6, 2018 at 8:44 AM, David Jones wrote: On 02/05/2018 09:07 PM, Alex wrote: Hi, ifplugin Mail::SpamAssassin::Plugin::DNSEval header __RCVD_IN_BRBL eval:check_rbl('brbl', 'bb.barracudacentral.org') tflags __RCVD_IN_BRBL

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread Alex
Hi, On Tue, Feb 6, 2018 at 8:44 AM, David Jones wrote: > On 02/05/2018 09:07 PM, Alex wrote: >> >> Hi, >> >>> ifplugin Mail::SpamAssassin::Plugin::DNSEval >>> >>> header __RCVD_IN_BRBL eval:check_rbl('brbl', >>> 'bb.barracudacentral.org') >>> tflags __RCVD_IN_BRBL net >>> >>>

prevent spamassassin from repeating previous tests

2018-02-06 Thread felix
Hi everybody, I have a postfix + amavis + dovecot setup, with spamassassin running both as amavis plugin and dovecot "before" stage sieve filter. The reason for this setup is that I want to reject mail that is obviously spam as soon as possible (done in amavis) but, as users are also able to m

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread David Jones
On 02/05/2018 09:07 PM, Alex wrote: Hi, ifplugin Mail::SpamAssassin::Plugin::DNSEval header __RCVD_IN_BRBL eval:check_rbl('brbl', 'bb.barracudacentral.org') tflags __RCVD_IN_BRBL net header __RCVD_IN_BRBL_2eval:check_rbl_sub('brbl', '127.0.0.2') meta

Re: Tone of emails with subject: 'hey'

2018-02-06 Thread Karol Augustin
On 2018-02-05 22:55, Philip wrote: > So lately I'm getting LOTS of emails coming directly though the filters so > most likely time to investigate how to create one. > > The subject is always 'hey' > > Subject: hey > > Date: Mon, 29 Jan 2018 09:07:40 +0300 > From: Darya Message-ID: <8f35b00

Re: Barracuda Reputation Block List (BRBL) removal from the SA ruleset

2018-02-06 Thread Matus UHLAR - fantomas
David Jones skrev den 2018-02-05 15:09: ifplugin Mail::SpamAssassin::Plugin::DNSEval header __RCVD_IN_BRBL eval:check_rbl('brbl', 'bb.barracudacentral.org') tflags __RCVD_IN_BRBL net header __RCVD_IN_BRBL_2eval:check_rbl_sub('brbl', '127.0.0.2') meta