Re: JMF whitelist and RAZOR conflict

2009-09-12 Thread John Hardin
On Fri, 11 Sep 2009, MySQL Student wrote: are you recieving forwarded emails from spf domains ? If I understand correctly, no. I have no relationship with any external source and their SPF records. if so add the forward ip to trusted_networks (so spf will be disabled from this hosts) Do

Re: JMF whitelist and RAZOR conflict

2009-09-12 Thread Henrik K
On Sat, Sep 12, 2009 at 09:02:35AM -0700, John Hardin wrote: On Fri, 11 Sep 2009, MySQL Student wrote: are you recieving forwarded emails from spf domains ? If I understand correctly, no. I have no relationship with any external source and their SPF records. if so add the forward ip to

Re: JMF whitelist and RAZOR conflict

2009-09-12 Thread John Hardin
On Sat, 12 Sep 2009, Henrik K wrote: On Sat, Sep 12, 2009 at 09:02:35AM -0700, John Hardin wrote: On Fri, 11 Sep 2009, MySQL Student wrote: are you recieving forwarded emails from spf domains ? If I understand correctly, no. I have no relationship with any external source and their SPF

Re: JMF whitelist and RAZOR conflict

2009-09-12 Thread Benny Pedersen
On lør 12 sep 2009 19:30:09 CEST, Henrik K wrote PS. SPF is checked on internal, not trusted border. Even though they are the same for most people.. some ? and I don't think you can disable SPF checks in any way except fully. if spf test is done in mta stage with prepended header for spf

Re: JMF whitelist and RAZOR conflict

2009-09-12 Thread Benny Pedersen
On lør 12 sep 2009 20:22:21 CEST, John Hardin wrote Hrm. Changing that might be something to consider, then. change sa to support srs ? or spf trusted_networks ? the later does work in my setup, if one know its not so, please tell me what my error is -- xpoint

Re: JMF whitelist and RAZOR conflict

2009-09-12 Thread John Hardin
On Sat, 12 Sep 2009, Benny Pedersen wrote: On lør 12 sep 2009 20:22:21 CEST, John Hardin wrote Hrm. Changing that might be something to consider, then. change sa to support srs ? or spf trusted_networks ? The latter. Possibly through another list instead of trusted_networks; the

Re: JMF whitelist and RAZOR conflict

2009-09-12 Thread Benny Pedersen
On lør 12 sep 2009 23:46:44 CEST, John Hardin wrote The latter. Possibly through another list instead of trusted_networks; the semantics are slightly different and overloading the current trusted list with an SPF meaning might be a it will be one more networks list to manage, and keeping

RE: JMF whitelist and RAZOR conflict

2009-09-11 Thread Bob O'Brien
No - that really came out of mail2.kraftfoods.com (parent corporation of Gevalia, remember?) I have seen other samples of the same message spamming other recipients, and there's no question of source IP. Bob -Original Message- From: MySQL Student

Re: JMF whitelist and RAZOR conflict

2009-09-11 Thread Benny Pedersen
On Fri 11 Sep 2009 01:21:16 AM CEST, MySQL Student wrote I have several emails that are tagged with RCVD_IN_JMF_W, SPF_SOFTFAIL, and RAZOR2_CHECK such as this one: http://pastebin.com/m4a4d990e why accept SPF_SOFTFAIL ? cant this be solved ? are you recieving forwarded emails from spf

Re: JMF whitelist and RAZOR conflict

2009-09-11 Thread Kelson
RW wrote: Razor looks-up fuzzy hashes of an email on a server that records the values that have previously been reported for spam. JMF_W is based on the IP address of the last hop into your trusted network (or internal if you set it up that way). Neither is based on URLs. Actually, Razor

Re: JMF whitelist and RAZOR conflict

2009-09-11 Thread MySQL Student
Hi, I have several emails that are tagged with RCVD_IN_JMF_W, SPF_SOFTFAIL, and RAZOR2_CHECK such as this one: http://pastebin.com/m4a4d990e why accept SPF_SOFTFAIL ? cant this be solved ? I don't understand. I'm still learning how the SPF rules work. Shouldn't I be adding points for an

Re: JMF whitelist and RAZOR conflict

2009-09-10 Thread RW
On Thu, 10 Sep 2009 19:21:16 -0400 MySQL Student mysqlstud...@gmail.com wrote: Hi, I have several emails that are tagged with RCVD_IN_JMF_W, SPF_SOFTFAIL, and RAZOR2_CHECK such as this one: http://pastebin.com/m4a4d990e Is the criteria for being listed on the JMF_W simply that it

Re: JMF whitelist and RAZOR conflict

2009-09-10 Thread MySQL Student
Hi, http://pastebin.com/m4a4d990e Is the criteria for being listed on the JMF_W simply that it contains a domain that is whitelisted, despite whether it contains another URL that is blacklisted? I'm not sure what you are saying here, it's not as if the people running the whitelist could

Re: JMF whitelist and RAZOR conflict

2009-09-10 Thread RW
On Thu, 10 Sep 2009 21:23:11 -0400 MySQL Student mysqlstud...@gmail.com wrote: Hi, http://pastebin.com/m4a4d990e Is the criteria for being listed on the JMF_W simply that it contains a domain that is whitelisted, despite whether it contains another URL that is blacklisted? I'm