Re: How to Block messages from display name not matching expected sender email address

2020-12-23 Thread Bill Cole
On 24 Dec 2020, at 0:02, Joey J wrote: Hello, I'm trying to figure out how to write a rule that looks for matches of certain names against the display name, and then insuring its from a list of valid email addresses. So a phishing email come in from "Boss Man" So I want to check if the

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/22/20 4:56 PM, Grant Taylor wrote: Is there a way to bypass RBL checks for a specific address? Thank you all. I believe I have been able to get the result I desired and learn a few things in the process. TL;DR: Setting scores to 0 in the specific recipient's

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/23/20 9:55 PM, John Hardin wrote: Did you see my mention of this earlier? Yes, I did see it. That's a bit more invasive of a change than I was hoping to do for this task. I had been waiting to reply to your earlier message to test some things that you recommended. As you will see

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/23/20 2:15 PM, John Hardin wrote: spamass-milter has a -u flag for a username to pass to SA. If these are single-recipient messages that may be enough to reliably tie into per-user config to disable the RBL check. It seems as if spamass-milter is using the -u to specify a default user.

How to Block messages from display name not matching expected sender email address

2020-12-23 Thread Joey J
Hello, I'm trying to figure out how to write a rule that looks for matches of certain names against the display name, and then insuring its from a list of valid email addresses. So a phishing email come in from "Boss Man" So I want to check if the display name is "Boss Man" and if so,

Re: Bypass RBL checks for specific address

2020-12-23 Thread John Hardin
On Wed, 23 Dec 2020, Grant Taylor wrote: That's all considerably more complicated than I'm comfortable with at the moment. Did you see my mention of this earlier? https://milter-manager.osdn.jp/reference/introduction.html -- John Hardin KA7OHZ

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/23/20 2:21 PM, Bill Cole wrote: You definitely would know if it were. One would think. My head is in a different project at the moment, and I can't tell you exactly how things are configured without going back and looking. /If/ things are configured to load per user settings from

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/23/20 3:32 PM, Martin Gregorie wrote: - In my case I run every message through SA, diverting spam into a quarantine directory and passing the rest to Postfix for delivery. I don't quarantine anything on this system. Spam is tagged if the score is between 5 and 15. Spam is rejected

Re: Bypass RBL checks for specific address

2020-12-23 Thread RW
On Wed, 23 Dec 2020 14:01:25 -0600 (CST) Dave Funk wrote: > Because it's assumed that DNS related stuff may take some time those > rules (if configured to run) are launched early in the processing of > a message. A couple of years ago some changes were made to support RBLS being short-circuited

Re: Bypass RBL checks for specific address

2020-12-23 Thread Martin Gregorie
On Wed, 2020-12-23 at 20:44 +0100, Benny Pedersen wrote: Fhis requirement is almost exactly rgew opposite of something I've been running for years: - In my case I run every message through SA, diverting spam into a quarantine directory and passing the rest to Postfix for delivery. - In your

Re: Bypass RBL checks for specific address

2020-12-23 Thread Kris Deugau
Bill Cole wrote: On 23 Dec 2020, at 13:57, Grant Taylor wrote: On 12/22/20 11:03 PM, Bill Cole wrote: Do you have a setup that supports per-user preferences? e.g.: real system accounts. Sort of.  The recipient is a real Unix account.  However I don't think my milter is configured to use

Re: UNSUBSCRIBE

2020-12-23 Thread Alan
On 2020-12-23 16:33, Antony Stone wrote: On Wednesday 23 December 2020 at 22:29:50, Alan wrote: On 2020-12-23 16:22, Richard Ozer wrote: To unsubscribe, e-mail: users-unsubscr...@netbeans.apache.org For additional commands, e-mail:

Re: UNSUBSCRIBE

2020-12-23 Thread Antony Stone
On Wednesday 23 December 2020 at 22:29:50, Alan wrote: > On 2020-12-23 16:22, Richard Ozer wrote: > > To unsubscribe, e-mail: users-unsubscr...@netbeans.apache.org > > For additional commands, e-mail: users-h...@netbeans.apache.org >

Re: UNSUBSCRIBE

2020-12-23 Thread John Hardin
On Wed, 23 Dec 2020, Richard Ozer wrote: In the headers of every message from the mailing list: list-unsubscribe: -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.org

Re: UNSUBSCRIBE

2020-12-23 Thread Alan
On 2020-12-23 16:22, Richard Ozer wrote: To unsubscribe, e-mail: users-unsubscr...@netbeans.apache.org For additional commands, e-mail: users-h...@netbeans.apache.org -- For SpamAsassin Users List

UNSUBSCRIBE

2020-12-23 Thread Richard Ozer

Re: Bypass RBL checks for specific address

2020-12-23 Thread Bill Cole
On 23 Dec 2020, at 13:57, Grant Taylor wrote: On 12/22/20 11:03 PM, Bill Cole wrote: Do you have a setup that supports per-user preferences? e.g.: real system accounts. Sort of. The recipient is a real Unix account. However I don't think my milter is configured to use per recipient

Re: Bypass RBL checks for specific address

2020-12-23 Thread John Hardin
On Wed, 23 Dec 2020, Grant Taylor wrote: I have about 2,000 messages a day that come in to my mail server for all recipients with the exception of one specific (set of) recipient(s). That (set of) recipient(s) receive 20,000 - 30,000 messages a day. They are very specific messages for an

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/23/20 1:37 PM, Dave Funk wrote: If all you want is for a particular class of recipients (at the envelope RCPT level) not be passed to spamass-milter inside sendmail that can be done with a bit of hacking of your sendmail config and the milter. Please elaborate. I'm not opposed to

Re: Bypass RBL checks for specific address

2020-12-23 Thread Dave Funk
On Wed, 23 Dec 2020, Grant Taylor wrote: Context is Sendmail, spamass-milter, and SpamAssassin (spamd). I didn't see any way to have spamass-milter bypass, much less conditionally bypass. Nor did I see a way to have Sendmail conditionally bypass a milter. If all you want is for a

Re: Bypass RBL checks for specific address

2020-12-23 Thread Iulian Stan
Dear Dave,The purpose of setting a priority higher than the RBL check is the run that meta before the DNS queries and if there is a match to stop additional tasks.Best Regards,Iulian Stan Original message From: Dave Funk Date: 12/23/20 22:01 (GMT+02:00) To:

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/23/20 12:40 PM, Benny Pedersen wrote: if you want to disable RBL for one single ip, then add it to trusted_networks in local.cf As indicated in the message you replied to, "I'm wanting to disable filtering for a recipient email address, which may receive messages from IP addresses all

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/23/20 1:01 PM, Dave Funk wrote: That may not work for what the OP wanted. O.o? Because it's assumed that DNS related stuff may take some time those rules (if configured to run) are launched early in the processing of a message. So if the OP wants to completely avoid running RBL

Re: Bypass RBL checks for specific address

2020-12-23 Thread Dave Funk
That may not work for what the OP wanted. Because it's assumed that DNS related stuff may take some time those rules (if configured to run) are launched early in the processing of a message. So if the OP wants to completely avoid running RBL checks (as opposed to just ignoring their

Re: Bypass RBL checks for specific address

2020-12-23 Thread Benny Pedersen
On 2020-12-23 19:59, Grant Taylor wrote: On 12/22/20 11:56 PM, Axb wrote: I'm wanting to not run RBL tests for the specific recipient email address. you will for this specifik task need a custom plugin in spamassassin if you just want to disable rbl test then add the ip to trusted_networks

Re: Bypass RBL checks for specific address

2020-12-23 Thread Iulian Stan
Hello all,You can create a meta rule with very high prio(actually check to be higher than your RBL), match what you need from email headers and than use shortcircuit to skip additional tests.Best regards,Iulian StanSent from my Galaxy Original message From: Grant Taylor Date:

Re: Bypass RBL checks for specific address

2020-12-23 Thread Benny Pedersen
On 2020-12-23 19:56, Grant Taylor wrote: Response Policy Zone(s) are neat and can do a LOT of things. But I don't think it's proper for my task at hand. if you want to disable RBL for one single ip, then add it to trusted_networks in local.cf if you want to disable one single recipient

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/22/20 11:56 PM, Axb wrote: whitelist_to ? My understanding is that whitelist_to, more_spam_to, and all_spam_to behave the same way and effectively just alter the scoring offset. It seems as if the tests are still run, and it's just the score is artificially offset based on which

Re: Do the Yahooniverse domains share email address space?

2020-12-23 Thread John Hardin
On Wed, 23 Dec 2020, Axb wrote: I misunderstood.. domain wise they are distinct users. Server_wise, they share servers except yahoo.co.jp which runs their own Ok. Thanks! -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.org

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
On 12/22/20 11:03 PM, Bill Cole wrote: Do you have a setup that supports per-user preferences? e.g.: real system accounts. Sort of. The recipient is a real Unix account. However I don't think my milter is configured to use per recipient filtering. If so, you can disable off individual

Re: Bypass RBL checks for specific address

2020-12-23 Thread Grant Taylor
Hi Rob, On 12/22/20 6:40 PM, Rob McEwen wrote: First, I'm NOT an expert on all of this - so somebody might be able to follow up with BETTER information, but this will hopefully point you in the right direction. Fair enough. Really big snip. First, I agree with and like your idea. For an

Re: Do the Yahooniverse domains share email address space?

2020-12-23 Thread Axb
I misunderstood.. domain wise they are distinct users. Server_wise, they share servers except yahoo.co.jp which runs their own On 12/23/20 6:31 PM, Matt Vernhout wrote: Not to my knowledge - all Yahoo.TLDs are distinct users... ~ Matt Vernhout http://www.emailkarma.net Twitter:

Re: Do the Yahooniverse domains share email address space?

2020-12-23 Thread Matt Vernhout
Not to my knowledge - all Yahoo.TLDs are distinct users... ~ Matt Vernhout http://www.emailkarma.net Twitter: @emailkarma/@CAUCE On Tue, Dec 22, 2020 at 4:21 PM John Hardin wrote: > On Mon, 21 Dec 2020, Axb wrote: > > > On 12/21/20 7:19 PM, John Hardin wrote: > >> Quick question for anyone