RE: [WARNING] RE: Help with rule matching when it shouldn't

2024-03-20 Thread Erickarlo Porro
, March 20, 2024 10:02 AM To: users@spamassassin.apache.org Subject: RE: Help with rule matching when it shouldn't I want to catch “yahoo” anywhere in the header so that it matches if its in the name or in the address. So I would want to match ya...@gmail.com<mailto:ya...@gmail.com> Reg

RE: Help with rule matching when it shouldn't

2024-03-20 Thread Erickarlo Porro
eturn path does not include yahoo.com, match my rule. From: Jimmy Sent: Tuesday, March 19, 2024 7:45 PM To: users@spamassassin.apache.org Subject: Re: Help with rule matching when it shouldn't The correct syntax for the header rule should be: header __FROM_ADDRESS From:addr =~ /\@yahoo\.com/i

Re: Help with rule matching when it shouldn't

2024-03-20 Thread Matus UHLAR - fantomas
can adjust the rules accordingly. Note that Return-Path may not exist at the time spam is filtered as it is often added when mail is delivered to mailbox. On Wed, Mar 20, 2024 at 4:52 AM Erickarlo Porro wrote: Could someone help me figure out why my custom rule is matching when it should not be mat

Re: Help with rule matching when it shouldn't

2024-03-19 Thread Jimmy
ETURNPATH_IS" rule should indeed be triggered since it matches "yahoo.com" in the return-path. If you're uncertain about the intended behavior of the rules, please clarify the requirements so we can adjust the rules accordingly. Jimmy On Wed, Mar 20, 2024 at 4:52 AM Erickarlo Porro wr

Help with rule matching when it shouldn't

2024-03-19 Thread Erickarlo Porro
Could someone help me figure out why my custom rule is matching when it should not be matching? This is my current setup: header __FROM_ADDRESS From =~ /yahoo/i header __RETURNPATH_IS Return-Path !~ /yahoo.com$/i meta NOT_IT (__FROM_ADDRESS && __RETURNPATH_IS) describe

Re: DNS Help

2023-09-12 Thread Bill Cole
On 2023-09-12 at 12:44:31 UTC-0400 (Tue, 12 Sep 2023 18:44:31 +0200) Matus UHLAR - fantomas is rumored to have said: On 11.09.23 10:35, D Benham wrote: Ok, I need some guidance.  I am getting a lot of this:  0.0 URIBL_BLOCKED  ADMINISTRATOR NOTICE: The query to URIBL was blocked.  

Re: DNS Help

2023-09-12 Thread Matus UHLAR - fantomas
On 11.09.23 10:35, D Benham wrote: Ok, I need some guidance.  I am getting a lot of this:  0.0 URIBL_BLOCKED  ADMINISTRATOR NOTICE: The query to URIBL was blocked.     See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block    

Re: DNS Help

2023-09-12 Thread Bill Cole
to help?  I'm just not sure where to go from here. have you also read the link(s) above? SA explains the problem and how to avoid it, namely points to: https://cwiki.apache.org/confluence/display/SPAMASSASSIN/CachingNameserver Unfortunately, the current page does NOT have A name="dnsbl-

Re: DNS Help

2023-09-12 Thread Matus UHLAR - fantomas
forwarded to a public DNS server?  I assume that, at some point, that has to happen...?  What am I missing?  What do I need to do/change?  What log files do I need to provide to help?  I'm just not sure where to go from here. have you also read the link(s) above? SA explains the problem and how

Re: DNS Help

2023-09-11 Thread Ricky Boone
I missing? > What do I need to do/change? What log files do I need to provide to > help? I'm just not sure where to go from here. > > > D >

Re: DNS Help

2023-09-11 Thread Tom Williams via users
forwarded to a public DNS server?  I assume that, at some point, that has to happen...?  What am I missing?  What do I need to do/change?  What log files do I need to provide to help?  I'm just not sure where to go from here. D I had this issue as well and installed unbound.  In addition

DNS Help

2023-09-11 Thread D Benham
assume that, at some point, that has to happen...?  What am I missing?  What do I need to do/change?  What log files do I need to provide to help?  I'm just not sure where to go from here. D

Re: Help with rule

2023-06-06 Thread John Hardin
On Mon, 5 Jun 2023, jacklistm...@gmail.com wrote: header FROM_CLIENT_IP Received =~ /from 138\.31\230\.222/ Missing a period in that one. meta FROM_CLIENT_TEST from FROM_CLIENT_EMAIL && FROM_CLIENT_IP Extra "from" already noted. If you're looking to whitelist specific senders coming from

Re: Help with rule

2023-06-06 Thread Bill Cole
On 2023-06-06 at 01:32:14 UTC-0400 (Tue, 6 Jun 2023 08:32:14 +0300) Henrik K via users is rumored to have said: On Tue, Jun 06, 2023 at 12:12:10AM -0400, Bill Cole wrote: Escape the @ with a \ SA uses Perl, so you need to escape %, @, and $ in regular expressions. Perl regular expressions

Re: Help with rule

2023-06-06 Thread Matus UHLAR - fantomas
On 05.06.23 22:04, jacklistm...@gmail.com wrote: I know this isn't the best method, I have to learn some of the previous suggestions, but I would like to get this rule to work. Not sure where I went wrong. header FROM_CLIENT_EMAIL From =~ /client@client\.com/i I recommend to use From:addr,

RE: Help with rule

2023-06-06 Thread jacklistmail
@spamassassin.apache.org Subject: Re: Help with rule > meta FROM_CLIENT_TEST from FROM_CLIENT_EMAIL && FROM_CLIENT_IP Is that a typo when you were making this mail, or is it actually how the line is coded? There is an extra "from" there. Even if you fix that, you won't get the res

Re: Help with rule

2023-06-05 Thread Henrik K via users
On Tue, Jun 06, 2023 at 12:12:10AM -0400, Bill Cole wrote: > > Escape the @ with a \ > SA uses Perl, so you need to escape %, @, and $ in regular expressions. Perl regular expressions does not mean it's parsed as Perl code, no need to quote such things on any remotely modern SA version.

Re: Help with rule

2023-06-05 Thread Bill Cole
On 2023-06-05 at 22:04:47 UTC-0400 (Mon, 5 Jun 2023 22:04:47 -0400) is rumored to have said: Hello All, I know this isn't the best method, I have to learn some of the previous suggestions, but I would like to get this rule to work. Not sure where I went wrong. header

Re: Help with rule

2023-06-05 Thread Loren Wilton
> meta FROM_CLIENT_TEST from FROM_CLIENT_EMAIL && FROM_CLIENT_IP Is that a typo when you were making this mail, or is it actually how the line is coded? There is an extra "from" there. Even if you fix that, you won't get the results you expect. Both FROM_CLIENT_EMAIL and FROM_CLIENT_IP will

Help with rule

2023-06-05 Thread jacklistmail
Hello All, I know this isn't the best method, I have to learn some of the previous suggestions, but I would like to get this rule to work. Not sure where I went wrong. header FROM_CLIENT_EMAIL From =~ /client@client\.com/i header FROM_CLIENT_IP Received =~ /from 138\.31\230\.222/ meta

Re: Rule Help - not sure what is wrong with my syntax

2023-01-14 Thread Loren Wilton
> header TO_SPECIFIC_DOMAIN To:addr =~ /\@(test\.com|test\.net)$/ That for efficiency really should use a non-capturing grouping: header TO_SPECIFIC_DOMAIN To:addr =~ /\@(?:test\.com|test\.net)$/ Note the "?:" after the left parend. Loren

Re: Rule Help - not sure what is wrong with my syntax

2023-01-13 Thread Benny Pedersen
David B Funk skrev den 2023-01-14 08:35: On Sat, 14 Jan 2023, Benny Pedersen wrote: Benny Pedersen skrev den 2023-01-14 03:59: header TO_SPECIFIC_DOMAIN To:addr =~ /\@(test|junc)\.(com|net|eu)$/ describe TO_SPECIFIC_DOMAIN Mail sent to test.com or test.net email addresses score

Re: Rule Help - not sure what is wrong with my syntax

2023-01-13 Thread David B Funk
On Sat, 14 Jan 2023, Benny Pedersen wrote: Benny Pedersen skrev den 2023-01-14 03:59: header TO_SPECIFIC_DOMAIN To:addr =~ /\@(test|junc)\.(com|net|eu)$/ describe TO_SPECIFIC_DOMAIN Mail sent to test.com or test.net email addresses score TO_SPECIFIC_DOMAIN -0.5 tested works if i mail myself

Re: Rule Help - not sure what is wrong with my syntax

2023-01-13 Thread Benny Pedersen
Benny Pedersen skrev den 2023-01-14 03:59: header TO_SPECIFIC_DOMAIN To:addr =~ /\@(test|junc)\.(com|net|eu)$/ describe TO_SPECIFIC_DOMAIN Mail sent to test.com or test.net email addresses score TO_SPECIFIC_DOMAIN -0.5 tested works if i mail myself :=)

Re: Rule Help - not sure what is wrong with my syntax

2023-01-13 Thread Benny Pedersen
Joey J skrev den 2023-01-14 03:42: header TO_SPECIFIC_DOMAIN To:addr =~ /\@(test\.com|test\.net)$/ describe TO_SPECIFIC_DOMAIN Mail sent to test.com or test.net email addresses score TO_SPECIFIC_DOMAIN -2.0 header TO_SPECIFIC_DOMAIN To:addr ~= /\@test\.(com|net)$/ should work

Re: Rule Help - not sure what is wrong with my syntax

2023-01-13 Thread Joey J
Thanks to everyone's suggestions. I will try to respond to everyone in this 1 message: This was intended for people who get both filtering inbound and outbound form the mail gateway. At times certain legit content gets flagged on the way OUT, so this was to try and add a little negative score,

Re: Rule Help - not sure what is wrong with my syntax

2023-01-12 Thread John Hardin
On Thu, 12 Jan 2023, John Hardin wrote: On Thu, 12 Jan 2023, Martin Gregorie wrote: On Wed, 2023-01-11 at 18:39 -0500, Joey J wrote: Hello All, I created this rule to check for email addresses matching a list to get added some negative value. I also tried it with just domains so it

Re: Rule Help - not sure what is wrong with my syntax

2023-01-12 Thread John Hardin
On Thu, 12 Jan 2023, Martin Gregorie wrote: On Wed, 2023-01-11 at 18:39 -0500, Joey J wrote: Hello All, I created this rule to check for email addresses matching a list to get added some negative value. I also tried it with just domains so it would be more efficient, but I can't seem to get

Re: Rule Help - not sure what is wrong with my syntax

2023-01-12 Thread Henrik K
> > Loren > > - Original Message - > From: [4]Joey J > To: [5]users@spamassassin.apache.org > Sent: Wednesday, January 11, 2023 3:39 PM > Subject: Rule Help - not sure what is wrong with my syntax > > Hello All, > >

Re: Rule Help - not sure what is wrong with my syntax

2023-01-12 Thread Martin Gregorie
On Wed, 2023-01-11 at 16:56 -0800, Loren Wilton wrote: > Why not do a simple rule rather than inventing some Perl code? > > header TO_SPECIFIC_EMAIL To:addr ~= > '(?:\bus...@example.com|\bus...@example.com|\bus...@example.com)' > describe TO_SPECIFIC_EMAIL Mail to a specific email address > score

Re: Rule Help - not sure what is wrong with my syntax

2023-01-12 Thread Martin Gregorie
On Wed, 2023-01-11 at 18:39 -0500, Joey J wrote: > Hello All, > > I created this rule to check for email addresses matching a list to > get > added some negative value. > I also tried it with just domains so it would be more efficient, but I > can't seem to get them to run. > Any suggestions? >

Re: Rule Help - not sure what is wrong with my syntax

2023-01-11 Thread Loren Wilton
: Joey J To: users@spamassassin.apache.org Sent: Wednesday, January 11, 2023 3:39 PM Subject: Rule Help - not sure what is wrong with my syntax Hello All, I created this rule to check for email addresses matching a list to get added some negative value. I also tried it with just

Rule Help - not sure what is wrong with my syntax

2023-01-11 Thread Joey J
Hello All, I created this rule to check for email addresses matching a list to get added some negative value. I also tried it with just domains so it would be more efficient, but I can't seem to get them to run. Any suggestions? header TO_SPECIFIC_EMAIL eval:check_to_specific_email() describe

Re: My emails are blocked when I ask for help (murder!) In need help!

2022-07-13 Thread Bill Cole
On 2022-07-13 at 09:08:23 UTC-0400 (Wed, 13 Jul 2022 16:08:23 +0300) Tomas Ukkonen is rumored to have said: Hello I'm asking for help online when I'm being murdered! Hyperbole is not your friend. This list is NOT a general support forum. It is specifically for users of the Apache Software

My emails are blocked when I ask for help (murder!) In need help!

2022-07-13 Thread Tomas Ukkonen
Hello I'm asking for help online when I'm being murdered! Police investigation showed there are people who want to murder me and hospital gives me experimental toxic treatment without reason. I cannot survive this treatment. When I ask for help online using emails spam systems

Re: Website "help" spams

2021-07-30 Thread Kevin A. McGrail
I'd prefer that information not be shared.  It's not for public use. On 7/30/2021 8:48 AM, RW wrote: is KAMOnly.pm plugin needed ?, atleast its should be documented, i have that plugin installed now, it makes huge diffrent, How did you get it? Or is it just a dummy plugin? -- Kevin A.

Re: Website "help" spams

2021-07-30 Thread Benny Pedersen
On 2021-07-30 14:48, RW wrote: How did you get it? Or is it just a dummy plugin? https://www.pccc.com/downloads/SpamAssassin/contrib/

Re: Website "help" spams

2021-07-30 Thread RW
On Thu, 29 Jul 2021 16:41:56 +0200 Benny Pedersen wrote: > On 2021-07-29 03:16, Kevin A. McGrail wrote: > > Are you running the KAM ruleset? There are some seo rules in > > there. > > is KAMOnly.pm plugin needed ?, atleast its should be documented, i > have that plugin installed now, it makes

Re: Website "help" spams

2021-07-29 Thread Benny Pedersen
to have a copy , most will say thank you, but dont share else, that sayed, you could share spamassassin -t msg results to get more help on create local rules to catch it

Re: Website "help" spams

2021-07-29 Thread Robert S
So far so good. 16 messages marked as spam over the last 12hr and one got through. Can I send the one that got through to somebody anonymously? On Fri, Jul 30, 2021 at 6:18 AM Kevin A. McGrail wrote: > > Lol and Thanks :-) The key thing you are seeing I would guess is our RBL. > We took it

Re: Website "help" spams

2021-07-29 Thread Kevin A. McGrail
Lol and Thanks :-) The key thing you are seeing I would guess is our RBL. We took it out of the public rules because a big player added it to their systems and we couldn't handle lookups from a few bazillion boxes. Linode donated us two boxes so it's on the roadmap to open it back up to the

Re: Website "help" spams

2021-07-29 Thread Benny Pedersen
On 2021-07-29 21:37, Kevin A. McGrail wrote: The KAMOnly plugin is not needed. It activates rules for our infrastructure. i like the infrastructure then

Re: Website "help" spams

2021-07-29 Thread Kevin A. McGrail
The KAMOnly plugin is not needed. It activates rules for our infrastructure. -- Kevin A. McGrail Member, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Thu, Jul 29, 2021 at 10:42 AM Benny Pedersen wrote: > On

Re: Website "help" spams

2021-07-29 Thread Benny Pedersen
On 2021-07-29 03:16, Kevin A. McGrail wrote: Are you running the KAM ruleset? There are some seo rules in there. is KAMOnly.pm plugin needed ?, atleast its should be documented, i have that plugin installed now, it makes huge diffrent, i am just asking, hopefully i helps others

Re: Website "help" spams

2021-07-29 Thread micah
These emails are often also about translation help, or offering to publish an article on your site. I do run the KAM ruleset, but they do not hit on these. Happy to provide some samples in some way that wouldn't get caught :D On 2021-07-29 10:25:19, Robert S wrote: > I am getting delu

Re: Website "help" spams

2021-07-28 Thread Loren Wilton
body NOT_INTERESTED=~ /“[Nn]ot\S{1,5}[Ii]nterested\.?â€/ Might also be an interesting test. I assume the gibberish on the front and back is quotes in some character set or another, but they seem a little unlikely in a real mail. Loren --- This email has been checked for

Re: Website "help" spams

2021-07-28 Thread John Hardin
On Thu, 29 Jul 2021, Robert S wrote: I am getting deluged with emails coming from semi-legitimate looking sources offering to "improve" my website, which is hosted with the same domain name as my email address (example below). Does anybody have a rule that helps to increase the spam score of

Re: [Help] bodyre in hashbl

2021-05-19 Thread Marco
Il 18/05/2021 15:27, Henrik K ha scritto: Instead of \x{00E0}, you need to use \xC3\xA0 as you are matching_separate_ raw bytes. (untested, but assuming so from the url, too busy to test) Yes, it works. I was confusing, the Spamassassin documentation is right. I really have to use non

Re: [Help] bodyre in hashbl

2021-05-18 Thread Henrik K
On Tue, May 18, 2021 at 03:04:12PM +0200, Marco wrote: > > Hello Henrik, > > thank you for the hints. I didn't realized that SA doesn't support UTF8 > regex. Well. As you suggest, I would like to write rules coding independent > in order to avoid surprises. I tried, it doesn't work... > > I

Re: [Help] bodyre in hashbl

2021-05-18 Thread Marco
Il 17/05/2021 18:12, Henrik K ha scritto: On Mon, May 17, 2021 at 03:02:57PM +0200, Marco wrote: So I have to add the accented character literally. I can't understand why. Are there any limitation in Hashbl plugin with UTF8? Maybe I have misunderstood something. SA doesn't support UTF8

Re: [Help] bodyre in hashbl

2021-05-17 Thread Henrik K
On Mon, May 17, 2021 at 07:12:47PM +0300, Henrik K wrote: > > Or check the replace_tags in 25_replace.cf, there's ready templates for > characters (but they match some commonly obfuscated variants too). And yeah sorry, these won't work with HashBL, it's just for basic rules..

Re: [Help] bodyre in hashbl

2021-05-17 Thread Henrik K
On Mon, May 17, 2021 at 03:02:57PM +0200, Marco wrote: > > So I have to add the accented character literally. > I can't understand why. Are there any limitation in Hashbl plugin with UTF8? > Maybe I have misunderstood something. SA doesn't support UTF8 regex. It's just matching plain byte

[Help] bodyre in hashbl

2021-05-17 Thread Marco
Hello, I'm trying to use Hashbl plugin with bodyre function. With that function I would like to match utf8 patterns, such as '([\p{L}\p{M}\d\S]+[\ \t]+[\p{L}\p{M}\d\S]+)' I'm in particular interested in accented characters, such as /[àèìòù]/. With Perl, if I try: ``` use utf8; use

Re: [sa-list] Re: Help writing a rule

2021-01-27 Thread Dan Mahoney (Gushi)
On Wed, 27 Jan 2021, John Hardin wrote: On Wed, 27 Jan 2021, Dan Mahoney (Gushi) wrote: All, I'm noticing a pattern of email like: From: "GUSHI.ORG Administrator" To: y...@gushi.org Subject: Your mailbox has exceeded its quota Or some such nonsense. Now, DMARC and SPF and DKIM would be

Re: Help writing a rule

2021-01-27 Thread John Hardin
On Wed, 27 Jan 2021, Dan Mahoney (Gushi) wrote: All, I'm noticing a pattern of email like: From: "GUSHI.ORG Administrator" To: y...@gushi.org Subject: Your mailbox has exceeded its quota Or some such nonsense. Now, DMARC and SPF and DKIM would be able to block the domain if they tried to

Help writing a rule

2021-01-27 Thread Dan Mahoney (Gushi)
All, I'm noticing a pattern of email like: From: "GUSHI.ORG Administrator" To: y...@gushi.org Subject: Your mailbox has exceeded its quota Or some such nonsense. Now, DMARC and SPF and DKIM would be able to block the domain if they tried to spoof it in the From email address. But mail

Re: help with simple test?

2020-01-17 Thread Matus UHLAR - fantomas
On 15.01.20 11:02, AJ Weber wrote: I'm hoping this is a relatively simple test... I'm seeing emails "From Me, To Me", typically extortion types. I'm not even seeing which of the SA tests are getting hit, because I have my own email in my Whitelist. Is there a way I can check IF From =

Re: help with simple test?

2020-01-15 Thread Alan Hodgson
On Wed, 2020-01-15 at 11:02 -0500, AJ Weber wrote: > I'm hoping this is a relatively simple test... > I'm seeing emails "From Me, To Me", typically extortion types. I'm not > even seeing which of the SA tests are getting hit, because I have my > own email in my Whitelist. > Is there a way I can

help with simple test?

2020-01-15 Thread AJ Weber
I'm hoping this is a relatively simple test... I'm seeing emails "From Me, To Me", typically extortion types. I'm not even seeing which of the SA tests are getting hit, because I have my own email in my Whitelist. Is there a way I can check IF From = m...@staticinfo.com AND Return-Path !=

Re: Custom rule help

2019-12-05 Thread Chris Mulcahy
On Wed, 4 Dec 2019 12:40:27 -0800 Chris Mulcahy wrote: > Hi. > > I’m relatively new to complex custom rules. I have plenty of simple > and some multi-condition rules but need something custom. > > My approach to using my domain name is bad but I started it in the > 90s so… I have some sites where

Re: Custom rule help

2019-12-05 Thread RW
On Wed, 4 Dec 2019 12:40:27 -0800 Chris Mulcahy wrote: > Hi. > > I’m relatively new to complex custom rules. I have plenty of simple > and some multi-condition rules but need something custom. > > My approach to using my domain name is bad but I started it in the > 90s so… I have some sites

Re: Custom rule help

2019-12-04 Thread Martin Gregorie
On Wed, 2019-12-04 at 14:22 -0800, Chris Mulcahy wrote: > Actually, I want it to score if there ISN’T a match. If I get an email > addressed to slashdot@example.com from an address that isn’t from > slashdot, it’s likely spam. > > Currently, I am doing like you mentioned with a bunch of

Re: Custom rule help

2019-12-04 Thread Chris Mulcahy
From: Martin Gregorie Reply: mar...@gregorie.org Date: December 4, 2019 at 4:12:22 PM To: users@spamassassin.apache.org Subject: Re: Custom rule help On Wed, 2019-12-04 at 12:40 -0800, Chris Mulcahy wrote: > I want a rule that scores if “sitename” is not in the From: line. If > the

Re: Custom rule help

2019-12-04 Thread Martin Gregorie
On Wed, 2019-12-04 at 12:40 -0800, Chris Mulcahy wrote: > I want a rule that scores if “sitename” is not in the From: line. If > they send from i...@sitename.com, I’ll assume it’s legit. If sitename > does not exist, I’ll tick up the score a bit. I have done this for > some specific domains but

Custom rule help

2019-12-04 Thread Chris Mulcahy
Hi. I’m relatively new to complex custom rules. I have plenty of simple and some multi-condition rules but need something custom. My approach to using my domain name is bad but I started it in the 90s so… I have some sites where I gave them my email address as “ sitename@mydomain.com” so I

Re: Help matching a spam (regex)

2019-06-04 Thread John Hardin
ed? Thanks for any enlightenment, RTFM. This may help to figure it out in debug mode: uri_detail  __ALL_URI_DTL_TXT    text =~ /.*/ tflags __ALL_URI_DTL_TXTmultiple You *should* be able to see exactly what is there - the HTML token or a UTF-8 byte sequence. -- John Har

Re: Help matching a spam (regex)

2019-06-04 Thread Amir Caspi
On Jun 4, 2019, at 4:05 PM, RW wrote: > > On Tue, 4 Jun 2019 16:06:10 -0300 Marcio Vogel Merlone dos Santos wrote: > >> Trying to match a message using uri_detail with no luck. On body I >> have something like this: >> >> Something > represents a '→' (right arrow) character, IIWY I'd try

Re: Help matching a spam (regex)

2019-06-04 Thread RW
On Tue, 4 Jun 2019 16:06:10 -0300 Marcio Vogel Merlone dos Santos wrote: > Hi all, > > Trying to match a message using uri_detail with no luck. On body I > have something like this: > > Something > > That "something" is changed on a daily basis, so I am trying to match > the which is common

Help matching a spam (regex)

2019-06-04 Thread Marcio Vogel Merlone dos Santos
Hi all, Trying to match a message using uri_detail with no luck. On body I have something like this: Something That "something" is changed on a daily basis, so I am trying to match the which is common to all variations, and failing miserably. I have tried the obvious and some (desperate)

Re: Help needed - Regex filter with exclude

2019-01-30 Thread Bowie Bailey
On 12/23/2018 6:52 AM, spamassassin_fo...@dwd.hu wrote: > Hi, > I want to filter all mails incoming to info@*ANY_DOMAIN*.hu except to > i...@asdf.hu > I have a lot of domains and spamming to info@ is legal in Hungary. :S > Thank you! If you are just looking for a regex, this should do it:

Re: Help needed - Regex filter with exclude

2018-12-23 Thread John Hardin
On Sun, 23 Dec 2018, spamassassin_fo...@dwd.hu wrote: I want to filter all mails incoming to info@*ANY_DOMAIN*.hu except to i...@asdf.hu I have a lot of domains and spamming to info@ is legal in Hungary. :S Thank you! Filtering like that is much better done in the MTA before the message

Re: Help needed - Regex filter with exclude

2018-12-23 Thread Matus UHLAR - fantomas
On 23.12.18 12:52, spamassassin_fo...@dwd.hu wrote: I want to filter all mails incoming to info@*ANY_DOMAIN*.hu except to i...@asdf.hu I believe simple directives "whitelist_to", "more_spam_to" and "all_spam_to" I have a lot of domains and spamming to info@ is legal in Hungary. :S is

Help needed - Regex filter with exclude

2018-12-23 Thread spamassassin_forum
Hi, I want to filter all mails incoming to info@*ANY_DOMAIN*.hu except to i...@asdf.hu I have a lot of domains and spamming to info@ is legal in Hungary. :S Thank you!

Re: OT: help from email experts needed

2018-11-10 Thread RW
On Sat, 10 Nov 2018 17:12:11 +0200 Jari Fredriksson wrote: > I have an DKIM/SPF secured email domain, but somehow my experience > with it has been perfect. > > SpamAssassin (and other Internet participants see the mail as > DKIM_INVALID if I send the mail from my Laptop to my sender. The >

Re: OT: help from email experts needed

2018-11-10 Thread Jari Fredriksson
> Jari Fredriksson kirjoitti 10.11.2018 kello 20.03: > > > >> Jari Fredriksson mailto:ja...@iki.fi>> kirjoitti 10.11.2018 >> kello 17.12: >> >> I have an DKIM/SPF secured email domain, but somehow my experience with it >> has been perfect. >> >> SpamAssassin (and other Internet

Re: OT: help from email experts needed

2018-11-10 Thread Jari Fredriksson
> Jari Fredriksson kirjoitti 10.11.2018 kello 17.12: > > I have an DKIM/SPF secured email domain, but somehow my experience with it > has been perfect. > > SpamAssassin (and other Internet participants see the mail as DKIM_INVALID if > I send the mail from my Laptop to my sender. The sender

Re: OT: help from email experts needed

2018-11-10 Thread Benny Pedersen
Jari Fredriksson skrev den 2018-11-10 16:12: I have an DKIM/SPF secured email domain, but somehow my experience with it has been perfect. oh well Authentication-Results: linode.junc.eu; dmarc=fail (p=none dis=none) header.from=iki.fi Authentication-Results: linode.junc.eu; dkim=none;

OT: help from email experts needed

2018-11-10 Thread Jari Fredriksson
I have an DKIM/SPF secured email domain, but somehow my experience with it has been perfect. SpamAssassin (and other Internet participants see the mail as DKIM_INVALID if I send the mail from my Laptop to my sender. The sender seems to be my laptop and my server could be forged. PasteBin:

Re: Make test fails on macOS High Sierra - help needed

2018-09-10 Thread Sidney Markowitz
Daniel J. Luke wrote on 11/09/18 5:58 AM: I use this (with a perl I built myself outside of macports) and I can confirm it works. Cool. Also, FYI, I did a quick test for the DB_File problem in the latest beta of Mac OS Mojave with the system perl and it did not have this bug. I haven't had

Re: Make test fails on macOS High Sierra - help needed

2018-09-10 Thread Daniel J. Luke
On Sep 8, 2018, at 8:48 PM, Sidney Markowitz wrote: > Macports install of db48 should work for that, but I haven't tried it. I use this (with a perl I built myself outside of macports) and I can confirm it works. -- Daniel J. Luke

Re: Make test fails on macOS High Sierra - help needed

2018-09-08 Thread Sidney Markowitz
This is really old, but it was never answered satisfactorily and it is what shows up in a Google search for the problem. I'm posting this solution to make sure it shows up in future searches. Here is the solution I just found and added to the Apache SpamAssassin wiki

Re: Help with own RBL

2018-07-25 Thread Luis E. Muñoz
On 23 Jul 2018, at 23:40, Pedro David Marco wrote: On Tuesday, July 24, 2018, 12:07:52 AM GMT+2, David B Funk wrote: What kind of 'calculations with that IP' ? Thanks Dave... calculations are complex and done with a an external script that reads some files parsing them... Depending

Re: Help with own RBL

2018-07-25 Thread Matus UHLAR - fantomas
On Tuesday, July 24, 2018, 12:07:52 AM GMT+2, David B Funk wrote: >What kind of 'calculations with that IP' ? On 24.07.18 06:40, Pedro David Marco wrote: Thanks Dave... calculations are complex and done with a an external script that reads some files parsing them... "calculations are

Re: Help with own RBL

2018-07-24 Thread Pedro David Marco
On Tuesday, July 24, 2018, 12:07:52 AM GMT+2, David B Funk wrote: >What kind of 'calculations with that IP' ? Thanks Dave... calculations are complex and done with a an external script that reads some files parsing them... -PedroD

Re: Help with own RBL

2018-07-24 Thread Pedro David Marco
On Tuesday, July 24, 2018, 12:04:57 AM GMT+2, Kris Deugau wrote: >IIRC PowerDNS can be set up to run Lua code fragments of some kind on  DNS >requests.     Thanks! i did not know it. i have checked it and Lus cannot exec eternanl commands to get a possible "answer"... > To

Re: Help with own RBL

2018-07-23 Thread David B Funk
On Mon, 23 Jul 2018, Pedro David Marco wrote: Not exactly a SA question but... i am planning to run my own RBL with a nameserver, that when queried for an IP that is not in its database, does some calculations with that IP and replies accordingly (caching the results)... Please, does anyone

Re: Help with own RBL

2018-07-23 Thread Kris Deugau
Pedro David Marco wrote: Not exactly a SA question but... i am planning to run my own RBL with a nameserver, that when queried for an IP that is not in its database, does some calculations with that IP and replies accordingly (caching the results)... Please, does anyone know of any

Re: Help with own RBL

2018-07-23 Thread Patrick Ben Koetter
* Pedro David Marco : > Not exactly a SA question but... > i am planning to run my own RBL with a nameserver, that when queried for an > IP that is not in its database, does some calculations with that IP and > replies accordingly (caching the results)... > Please, does anyone know of any

Help with own RBL

2018-07-23 Thread Pedro David Marco
Not exactly a SA question but... i am planning to run my own RBL with a nameserver, that when queried for an IP that is not in its database, does some calculations with that IP and replies accordingly (caching the results)... Please, does anyone know of any nameserver that can do that? To my

Re: Help with Bayes-SQL-Configuration

2018-07-18 Thread Kris Deugau
Julian Kippels wrote: Hi, I am in the process of setting up a bayes-sql-database but I am unsure of wether I want to set the bayes_sql_override_username option. I would like to have per-user-bayes scores, so that scores from user A will not interfere with messages sent to user B. If I

Help with Bayes-SQL-Configuration

2018-07-18 Thread Julian Kippels
Hi, I am in the process of setting up a bayes-sql-database but I am unsure of wether I want to set the bayes_sql_override_username option. I would like to have per-user-bayes scores, so that scores from user A will not interfere with messages sent to user B. If I understand it correctly, no

Semi OT: Greek help needed

2018-05-13 Thread Pedro David Marco
is there anyone from Greece in the list, please? i need some help about some greek emails.. Thanks.. --PedroD

Re: Make test fails on macOS High Sierra - help needed

2018-01-29 Thread John Hardin
-utils package, that might be a free-space recovery tool analogous to VACUUM that would recover space. If that also didn't that might help isolate the cause of the problem. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -

Re: Make test fails on macOS High Sierra - help needed

2018-01-29 Thread Palvelin Postmaster
> On 26 Jan 2018, at 7:59, Bill Cole > wrote: > > On 25 Jan 2018, at 4:54 (-0500), Palvelin Postmaster wrote: > >> Hi all, >> >> I tried to install Mail::SpamAssassin via Perl CPAN on a relatively fresh >> install of macOS 10.13.3 High Sierra. Make

Re: Make test fails on macOS High Sierra - help needed

2018-01-25 Thread Bill Cole
On 25 Jan 2018, at 4:54 (-0500), Palvelin Postmaster wrote: Hi all, I tried to install Mail::SpamAssassin via Perl CPAN on a relatively fresh install of macOS 10.13.3 High Sierra. Make test stalls indefinitely. Can anyone offer suggestions what I should do? Be grateful, you dodged a bullet

Re: Make test fails on macOS High Sierra - help needed

2018-01-25 Thread Palvelin Postmaster
Hmm…it seems Spamassassin is already installed by the Server.app into /Applications/Server.app/Contents/ServerRoot/usr/bin/spamassassin. That should take care of my problem. :) > On 25 Jan 2018, at 11:54, Palvelin Postmaster wrote: > > Hi all, > > I tried to install

Make test fails on macOS High Sierra - help needed

2018-01-25 Thread Palvelin Postmaster
Hi all, I tried to install Mail::SpamAssassin via Perl CPAN on a relatively fresh install of macOS 10.13.3 High Sierra. Make test stalls indefinitely. Can anyone offer suggestions what I should do? Running make test "/usr/bin/perl" build/mkrules --exit_on_no_src --src rulesrc --out rules

Re: help with phishing email?

2017-12-10 Thread David Jones
On 12/10/2017 11:49 AM, Colony.three wrote: * http://www.postfix.org/POSTSCREEN_README.html with that config and postscreen properly configured you block far more than 90% of junk without risk false positives postscreen_dnsbl_threshold = 8 postscreen_dnsbl_action =

Re: help with phishing email?

2017-12-10 Thread Colony.three
> - http://www.postfix.org/POSTSCREEN_README.html > > with that config and postscreen properly configured you block far more > than 90% of junk without risk false positives > > postscreen_dnsbl_threshold = 8 > postscreen_dnsbl_action = enforce > postscreen_greet_action = enforce >

Re: help with phishing email?

2017-12-09 Thread David Jones
On 12/09/2017 05:40 AM, Rupert Gallagher wrote: ... On Sat, Dec 9, 2017 at 04:24, Jari Fredriksson > wrote: 0.0 SPF_FAIL SPF: sender does not match SPF record (fail) I would recommend setting the score for SPF_FAIL to a point or two these days. Major

  1   2   3   4   5   6   7   8   9   10   >