On 2024/06/20 10:13, Jeff Pang via mailop wrote:
> Hello
>
> Recently i got a lot of spams like this one:
> https://cloud.hostcache.com/spam.eml
>
> They have two features:
> 1. arabic language
> 2. from google groups (though i never joined those groups)
I've reported a bunch of these over the y
BTW, What’s the good way to block messages based on languages?
On 2024-06-20 15:49, Stuart Henderson via mailop wrote:
On 2024/06/20 10:13, Jeff Pang via mailop wrote:
Hello
Recently i got a lot of spams like this one:
https://cloud.hostcache.com/spam.eml
They have two features:
1. arabic lan
On Thu, Jun 20, 2024 at 05:33:47PM +0800, Jeff Peng via mailop wrote:
> BTW, What’s the good way to block messages based on languages?
Analyzing messages for language content first, then being able to
decide based on results. There are multiple libraries for multiple
programming languages that wil
A much more performant way would be matching UTF code points with regex:
https://regex101.com/r/yF7gV6/2
[image: Sender] Edgar Vaitkevičius, founder / CEO
ed...@sender.net
On Thu, Jun 20, 2024 at 12:53 PM Atro Tossavainen via mailop <
mailop@mailop.org> wrote:
> On Thu, Jun 20, 2024 at 05:33
On 20/06/2024 10:33, Jeff Peng via mailop wrote:
BTW, What’s the good way to block messages based on languages?
https://rspamd.com/doc/developers/examples.html#languages-filter
Or use multimap plugin with selector type and `languages` selector.
Rspamd language detector is pretty good and effi
Jeff Pang via mailop skrev den 2024-06-20 04:13:
Hello
Recently i got a lot of spams like this one:
https://cloud.hostcache.com/spam.eml
They have two features:
1. arabic language
2. from google groups (though i never joined those groups)
how can i stop them effectively? (block arabic and goog
Jeff Pang via mailop skrev den 2024-06-20 04:13:
Recently i got a lot of spams like this one:
https://cloud.hostcache.com/spam.eml
Content Domains: gmail.com google.com googlegroups.com
Content analysis details: (13.6 points, 5.0 required)
pts rule name description
Anyone from Cloudmark able to assist with why the IP address:
67.222.148.107
is listed in their blacklist?
I filled out the form
https://csi.cloudmark.com/en/reset
two days ago. I got the Confirm CSI IP Address Statistics Reset Request
email and responded to it. But the IP still appears to b
Hi
Brazil uses a system of electronic invoices called NFe.
I was in contact with oobj.com.br one of the companies running that
system after more and more of those NFe emails started hitting
recipients here.
This attracts scammer which send spoofed electronic invoices to
companies in the hope the
Replied off list.
> On Jun 20, 2024, at 8:38 AM, Scott Mutter via mailop
> wrote:
>
> Anyone from Cloudmark able to assist with why the IP address:
>
> 67.222.148.107
>
> is listed in their blacklist?
>
> I filled out the form
>
> https://csi.cloudmark.com/en/reset
>
> two days ago. I go
Maybe give a try on this one?
admin.exter...@timbrasil.com.br
But I doubt they will answer you.
Does anyone have any contact to TIM Brazil and could either forward
this email to them or tell me who to contact?
--
Jeff Pang
jeffp...@aol.com
___
mai
today I clear up iptables rules, and run fail2ban again.
in half of an hour, it blocked 1400+ IPs.
$ sudo iptables -L -n|grep DROP|wc -l
1407
it seems the black ips are coming endlessly.
most of the bad actions are like this one:
postfix/smtps/smtpd[451948]: warning: unknown[211.184.190.87]:
And in an hour it gets double IPs blocked.
$ sudo iptables -L -n|grep DROP|wc -l
2805
any idea?
Thanks
today I clear up iptables rules, and run fail2ban again.
in half of an hour, it blocked 1400+ IPs.
$ sudo iptables -L -n|grep DROP|wc -l
1407
it seems the black ips are coming endlessly.
m
I guess my mentality is a large IPTables is still less of a load than letting
them establish a connection and attempt to authenticate, but I'm certainly open
to better ideas.
Rhys (R-ee-s) Ferris
Internet Mail Team | SMAS Support Team
U.S. Senate
Sent from my mobile device
On Jun 20, 2024 8:38
On 2024-06-20 17:20, Jeff Pang via mailop wrote:
today I clear up iptables rules, and run fail2ban again.
in half of an hour, it blocked 1400+ IPs.
$ sudo iptables -L -n|grep DROP|wc -l
1407
I am afraid too many iptables will slow down the performance of systems.
do you have any suggestion for
>
> On 21. Jun 2024, at 05:15, Raymond Burkholder via mailop
> wrote:
>
> On 2024-06-20 17:20, Jeff Pang via mailop wrote:
>> today I clear up iptables rules, and run fail2ban again.
>> in half of an hour, it blocked 1400+ IPs.
>>
>> $ sudo iptables -L -n|grep DROP|wc -l
>> 1407
>>
>> I am
On Fri, Jun 21, 2024 at 07:20:17AM +0800, Jeff Pang via mailop wrote:
> It seems the black ips are coming endlessly. Most of the bad actions
> are like this one:
>
> postfix/smtps/smtpd[451948]: warning: unknown[211.184.190.87]: SASL LOGIN
> authentication failed: UGFzc3dvcmQ6
>
> I am afraid
* Jeff Pang via mailop:
> postfix/smtps/smtpd[451948]: warning: unknown[211.184.190.87]: SASL
> LOGIN authentication failed: UGFzc3dvcmQ6
>
> I am afraid too many iptables will slow down the performance of systems.
Are you worried about iptables slowing systems down compared to Postfix
(and what
Am 21.06.2024 um 07:20:17 Uhr schrieb Jeff Pang via mailop:
> postfix/smtps/smtpd[451948]: warning: unknown[211.184.190.87]: SASL
> LOGIN authentication failed: UGFzc3dvcmQ6
>
> I am afraid too many iptables will slow down the performance of
> systems. do you have any suggestion for handling t
Hi Jeff
> Maybe give a try on this one?
> admin.exter...@timbrasil.com.br
>
> But I doubt they will answer you.
I'm not even able to send them emails, same as with their abuse desk.
- The following addresses had permanent fatal errors -
(reason: 550 5.4.1 Recipient address rejec
On 21.06.24 07:20, Jeff Pang via mailop wrote:
today I clear up iptables rules, and run fail2ban again.
in half of an hour, it blocked 1400+ IPs.
$ sudo iptables -L -n|grep DROP|wc -l
1407
I use ipset:
REJECT tcp -- anywhere anywhere match-set
block-mail src rej
21 matches
Mail list logo
