[pfx] Re: Do you reject DMARC failures?

2024-07-30 Thread chandan via Postfix-users
In POSTSCREEN i use 12 blocklists and whitelists. each is given a 
particular score based on a custom ML algorithm. The scores get adjusted 
everyday based on the performance of the RBLs. I don’t reject based on 
SPF, DMARC, or DKIM.


However i do have spam detection powered by RSPAMD, which takes into 
account SPF,DKIM,DMARC and host of other stuff. right now experimenting 
with LLMs as tool to detect SPAM apart from the standard baye’s.


On 2024-07-30 11:52, Jaroslaw Rafa via Postfix-users wrote:
Dnia 30.07.2024 o godz. 12:38:15 Matus UHLAR - fantomas via 
Postfix-users pisze:

>I filter messages only based on RBLs, manual blocklists and content
>filtering (SA + many custom rules). And as for the latter, the messages are
>sent to spam folder, never rejected. Rejections are based only on first two.

Funny, since multiple people in the past recommended rejecting on
spamminess, not on the results of single DNSBL listing.


I use only two DNSBLs that - at least for me - seem to give almost no 
false
positives - bl.spamcop.net and zen.spamhaus.org. In the past I used 
three -

instead of zen.spamhaus.org I was using dul.dnsbl.sorbs.net and
sbl-xbl.spamhaus.org. But because sorbs.net went down, and 
zen.spamhaus.org

seems to effectively combine these two, I changed it.

Of course I always have the option to manually override DNSBL listing 
in my

manual access list, but I don't remember when I last had to use it.

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: Do you reject DMARC failures?

2024-07-30 Thread chandan via Postfix-users
Fr LLM based detection rspamd has a new a new GPT Plugin they introduced 
with

version 3.9

https://rspamd.com/doc/modules/gpt.html

https://rspamd.com/misc/2024/07/03/gpt.html

Currently it’s based on OpenAI apis. but can be adapted for local LLMs 
or any LLM offering OpenAI type APIs.


Cheers
Chandan
On 2024-07-30 18:07, Laura Smith wrote:
I too am interested in experiences with rspamd and LLMs, so if there is 
anything people don't want to share on-list, please loop me in. :)


Thanks !

Laura


On Tuesday, 30 July 2024 at 18:51, Walt E via Postfix-users 
 wrote:


Can you share your experience on LLM for rspamd? Any links/resources 
are

appreciated.

Thank you

On 2024-07-30 21:42, chandan via Postfix-users wrote:

> In POSTSCREEN i use 12 blocklists and whitelists. each is given a
> particular score based on a custom ML algorithm. The scores get
> adjusted everyday based on the performance of the RBLs. I don’t reject
> based on SPF, DMARC, or DKIM.
>
> However i do have spam detection powered by RSPAMD, which takes into
> account SPF,DKIM,DMARC and host of other stuff. right now experimenting
> with LLMs as tool to detect SPAM apart from the standard baye’s.
>
> On 2024-07-30 11:52, Jaroslaw Rafa via Postfix-users wrote:
>
> > Dnia 30.07.2024 o godz. 12:38:15 Matus UHLAR - fantomas via
> > Postfix-users pisze:
> >
> > > > I filter messages only based on RBLs, manual blocklists and content
> > > > filtering (SA + many custom rules). And as for the latter, the messages 
are
> > > > sent to spam folder, never rejected. Rejections are based only on first 
two.
> > >
> > > Funny, since multiple people in the past recommended rejecting on
> > > spamminess, not on the results of single DNSBL listing.
> >
> > I use only two DNSBLs that - at least for me - seem to give almost no
> > false
> > positives - bl.spamcop.net and zen.spamhaus.org. In the past I used
> > three -
> > instead of zen.spamhaus.org I was using dul.dnsbl.sorbs.net and
> > sbl-xbl.spamhaus.org. But because sorbs.net went down, and
> > zen.spamhaus.org
> > seems to effectively combine these two, I changed it.
> >
> > Of course I always have the option to manually override DNSBL listing
> > in my
> > manual access list, but I don't remember when I last had to use it.
> > ___
> > Postfix-users mailing list -- postfix-users@postfix.org
> > To unsubscribe send an email to postfix-users-le...@postfix.org

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: Postfix ignores message id when threaded bounces are enabled if RFC-5322 header folding is used

2024-09-05 Thread chandan via Postfix-users

On 2024-09-05 12:27, Viktor Dukhovni via Postfix-users wrote:


There is no hard requirement to fold at 78 characters, the limit is 998
bytes.  And Message-Id SHOULD not be folded, even if over 78 bytes 
long.


I think it is fine for Postfix to treat folded Message-IDs as 
malformed.


Interesting. I can see the following from certain microsoft noreply mail 
ids


   breaking line > 998 bytes with SPACE

What is this?

It doesn’t happen with outlook personal mails.

Chandan
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org


[pfx] Re: Mails sent to rspamd twice

2024-09-09 Thread chandan via Postfix-users

On 2024-09-09 10:53, Danjel Jungersen via Postfix-users wrote:

Hey!

I have set up clamav, and I think it works
But when a mail is recieved, it is first scanned by rspamd and then 
clamav. Thats all fine.

But when clamav is done, rspamd scans it again.


you are using amavis as content filter with clamav

you are probably using rspamd with clamav module as a milter

so clamav scans your mail twice.

what is the problem?

cheers
chandan
___
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org