Re: [mailop] Come on protection.outlook.com, don't send me messages even you think are SPAM

2017-05-04 Thread Dave Warren
On Mon, May 1, 2017, at 22:07, Carl Byington wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
> 
> On Sat, 2017-04-29 at 00:01 -0700, Mark Milhollan wrote:
> > But some have an X-Forefront-Antispam-Report header with SFV:SPM which
> > has been said is their indicator of a message they consider to be
> > SPAM.
> 
> Yes, and we take MS at their word, and via SA flatly reject such
> messages (at least for users that have spam filtering contexts that
> include our standard SA setup).

I've been quarantining the mail for over a year and cannot find any case
where the message was actively released by the user (or administrator),
so whatever they are doing it does seem to be effective.

At this point it's a guarantee quarantine, but separately it is weighted
high enough that most such mail will ultimately get rejected if it has
even the slightest bit of bad odour.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] DMARC analysis

2017-05-04 Thread Yves-Marie Le Pors Chauvel
>
> From: Rok Potočnik 
> To: mailop@mailop.org
> Subject: [mailop] DMARC analysis
> Message-ID: <7a7c7076-7a1c-385d-f418-64810e941...@t-2.com>
> Content-Type: text/plain; charset=utf-8; format=flowed
>
> So, I'd like to deploy DMARC as an ISP/ESP by default to the customers,
> but I can't seem to find any opensource solution regarding report
> analysis/graphing, or at least I can't seem to find a solution on
> https://dmarc.org/resources/code-and-libraries/
>
> I know there are a bunch of 'free' solutions like dmarcanalyzer.com and
> dmarcian.com, I'd still prefer privately hosted software. Anything like
> that out there in the wild?
>
> --
> BR, Rok
>
Hi Rok,

Did you have a look to this script : http://www.taugh.com/rddmarc/ ?

Regards,

-- 
Yves-Marie LE PORS-CHAUVEL
Email Product Manager
*T: +33 2 23 45 57 99* (3043)
3 rue de Paris - Atalis 2 / Batiment D - 35 510 Cesson Sévigné
www.ccmbenchmark.com
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Google email hosting and abuse handling?

2017-05-04 Thread Lena
> From: Brandon Long

> To whitelist abuse@domain, you would need to:

> This won't disable our blatant spam blocking a smtp-time, however.  And
> there is no way to disable the antivirus blocking either (I see some folks
> who complain about that as well).

I think that by default addresses abuse @ every domain
must accept without any spam and virus filtering (including smtp-time)
messages with Subject containing one of subscrings (case-independent):
fwd, forward, spam, complain, virus, trojan, phish, abuse.
Also messages in ARF format.
Greylisting for 3 min is OK. As is use of a DNSBL such as CBL.
Even greylisting-if-in-CBL-or-no-FCRDNS is quite effective.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Google email hosting and abuse handling?

2017-05-04 Thread David Hofstee
For the most part I agree. Maybe there should be a mechanism to ensure that
dangerous content is flagged in such a way that it is 'disarmed' (or very
explicitly flagged) but available for research. Not all abuse@ departments
require, or are equiped, to work with viruses.

Yours,


David

2017-05-04 11:03 GMT+02:00 :

> > From: Brandon Long
>
> > To whitelist abuse@domain, you would need to:
>
> > This won't disable our blatant spam blocking a smtp-time, however.  And
> > there is no way to disable the antivirus blocking either (I see some
> folks
> > who complain about that as well).
>
> I think that by default addresses abuse @ every domain
> must accept without any spam and virus filtering (including smtp-time)
> messages with Subject containing one of subscrings (case-independent):
> fwd, forward, spam, complain, virus, trojan, phish, abuse.
> Also messages in ARF format.
> Greylisting for 3 min is OK. As is use of a DNSBL such as CBL.
> Even greylisting-if-in-CBL-or-no-FCRDNS is quite effective.
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>



-- 
--
My opinion is mine.
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] DMARC analysis

2017-05-04 Thread Florian Beer

Hi,
I've developed a solution that connects to a configurable IMAP mailbox 
and analyzes the messages, all packaged up in a neat webinterface with a 
poller process being run on the server.
Here is a short visual demo: 
http://stuff.no-panic.at/videos/trillian-astra.mov (sorry only .mov 
format at the moment)


If this approach seems interesting to your just contact me directly and 
we can talk further.


Regards,
Florian
_
DI (FH) Florian Beer
42dev e. U. - web solutions & hosting services
+43 699 14422569
http://42dev.eu

On 2017-05-04 10:03, Yves-Marie Le Pors Chauvel wrote:


From: Rok Potočnik 
To: mailop@mailop.org
Subject: [mailop] DMARC analysis
Message-ID: <7a7c7076-7a1c-385d-f418-64810e941...@t-2.com>
Content-Type: text/plain; charset=utf-8; format=flowed

So, I'd like to deploy DMARC as an ISP/ESP by default to the 
customers,

but I can't seem to find any opensource solution regarding report
analysis/graphing, or at least I can't seem to find a solution on
https://dmarc.org/resources/code-and-libraries/

I know there are a bunch of 'free' solutions like dmarcanalyzer.com 
and
dmarcian.com, I'd still prefer privately hosted software. Anything 
like

that out there in the wild?

--
BR, Rok


Hi Rok,
Did you have a look to this script : http://www.taugh.com/rddmarc/ ?

Regards,
--

Yves-Marie LE PORS-CHAUVEL

Email Product Manager

T: +33 2 23 45 57 99 (3043)

3 rue de Paris - Atalis 2 / Batiment D - 35 510 Cesson Sévigné
www.ccmbenchmark.com

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Microsoft SNDS

2017-05-04 Thread John Cenile
Hi,

Microsoft's SNDS system has no data for our IP addresses for the last 3
days, however one of our IP addresses appears to be getting rate limited:

451 4.7.500 Server busy. Please try again later from [XX.XXX.X.XX].
(AS77713180) [XXX.eop-XX01.prod.protection.outlook.com]: retry
timeout exceeded

I have already contacted their horrible level 1 support team by filling out
the usual support form (and am currently waiting for their pathetic copy /
paste responses that we always get), but I'm hoping someone on-list from
Microsoft can contact me directly to provide some assistance.

A lot of our customers are currently unable to email anyone on Hotmail, and
all we can really tell them is "Hotmail's reporting system isn't working,
and they're rate limiting our IP address for seemingly no reason", and
recommending they move *away* from Hotmail.

Any help would be great.

Thanks.
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop