Re: [mailop] Microsoft sending multiple Message-ID headers in password reset links..

2015-09-15 Thread Steve Freegard
On 15/09/15 18:24, Al Iverson via mailop.org wrote: Is this truly having an immediate negative impact operationally? It seems like this could be feedback you could give them directly, offlist, without having to share it with the rest of us. Very funny. Feedback to where? Their 1st line su

Re: [mailop] Microsoft sending multiple Message-ID headers in password reset links..

2015-09-15 Thread Steve Freegard
On 15/09/15 19:44, Michael Wise via mailop.org wrote: No, it doesn't. After all, technically Message-ID is an optional field. I bitch and moan about that, but nobody cares... They all end up pointing to, "SHOULD", and I can't really do anything but :'( Yeah - it might say SHOULD, but it's exp

Re: [mailop] TLS verify=FAIL

2016-04-13 Thread Steve Freegard
Hi Robert, I'm one of the developers of Haraka. verify=FAIL simply means that the TLS certificate presented by the peer host could not be verified as trusted by a CA. In the case of an MUA (which this appears to be), it would be normal as an MUA does not usually present client TLS certificates

Re: [mailop] TLS verify=FAIL

2016-04-14 Thread Steve Freegard
On 14/04/16 00:58, Al Iverson via mailop.org wrote: Boo @ designing something so that "FAIL is really nothing is to be concerned with." It's the kind of thing deliverability people will now be spending the rest of their lives explaining to clients that this big ole FAIL is to be ignored. Agr

Re: [mailop] TLS verify=FAIL

2016-04-14 Thread Steve Freegard
On 14/04/16 01:19, Franck Martin via mailop wrote: Have a look at https://tools.ietf.org/html/draft-martin-authentication-results-tls-03 may be jump to the example... I did not pursue, but many MTA clients are sending the certificates, meant for receiving email to the server they are connec

[mailop] Google Groups pain

2016-04-25 Thread Steve Freegard
Hi all, We scan mail for a domain which uses Google Apps for Education and as part of that they use Google Groups for communications to students. Does anyone have any idea why when someone sends a message to group 'all_staff_and_stude...@domain.com' that Google insists on sending a single me

Re: [mailop] Google Groups pain

2016-04-25 Thread Steve Freegard
Hi Brandon/Steve, On 25/04/16 22:19, Brandon Long via mailop wrote: Google groups mostly does verps style addressing for the reasons that Steve mentions. We added support for not doing it for apps domains going to internal addresses, but mostly that doesn't work any more since we split deli

Re: [mailop] why "not comply with best practices" on SpamRats?

2016-06-14 Thread Steve Freegard
is, there's plenty of places and software that with look at that PTR and say "it's dynamic" and treat it accordingly and they don't have to use a DNSBL to determine that because it's simple to do with heuristics. Kind regards, Steve. -- Steve Freegard Development

Re: [mailop] why "not comply with best practices" on SpamRats?

2016-06-14 Thread Steve Freegard
e IP address appear within the name. Kind regards, Steve. -- Steve Freegard Development Director Fort Systems Ltd. ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] O365 false-positives

2016-08-05 Thread Steve Freegard
hey're person-to-person and not mailing-list traffic and what I can do to rectify this. Thanks in advance. Kind regards, Steve. -- Steve Freegard Fort Systems Ltd. ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Gmail SPF bug?

2017-01-18 Thread Steve Freegard
: and ip6: addresses into their record and to re-test it. The customer just reported back to me that this worked - has anyone else seen this behaviour and anyone from Google here that can confirm that this is a bug. Kind regards, Steve. -- Steve Freegard Development Direc

Re: [mailop] Gmail SPF bug?

2017-01-18 Thread Steve Freegard
a now, so I don't know what was going on then. > > Brandon > > On Wed, Jan 18, 2017 at 5:33 AM, Vick Khera <mailto:vi...@khera.org>> wrote: > > > On Wed, Jan 18, 2017 at 7:41 AM, Steve Freegard > mailto:steve.freeg...@fsl.com>> wrote: > >

Re: [mailop] New Validity policy for paid FBL (ARF)

2023-09-21 Thread Steve Freegard via mailop
te his own service to > get back the control of their FBL, it will not have just a short term > impact... > > ___ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop > -- Steve Freegard | Senior Produ

Re: [mailop] New Validity policy for paid FBL (ARF)

2023-09-21 Thread Steve Freegard via mailop
t; likely defer to a new middle-man to handle the implementation, and we're > back at a single vendor. > > Mike > -- > *From:* mailop on behalf of Steve Freegard > via mailop > *Sent:* Thursday, September 21, 2023 12:05 PM > *To:* Support 3

Re: [mailop] Are there other comparable services like spamcop.net / spamhaus.org?

2024-04-12 Thread Steve Freegard via mailop
Aban Dokht aban.do...@abando.de > -- > ___ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop > -- [image: photo] Steve Freegard Abusix [image: linkedin] <https:/

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-22 Thread Steve Freegard via mailop
n this to annoy people, I did it because it's useful for the internet in general because compromised accounts are a huge issue, and one that causes issues for blacklist providers like us (e.g. if the compromised accounts are on unblockable IPs, then we have less ability to stop them), so this was

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-22 Thread Steve Freegard via mailop
h any compatible tooling and automation. My reading is that bad actors will find valid email addresses as part of successful exploits and then feed those into their automated attacks. They'll get these via database dumps, compromised hosts and phishing. Kind regards, Steve. -- Steve Freeg

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-22 Thread Steve Freegard via mailop
sure you'll understand that I can't really say on a public forum how we do this.   Catch me at a M3AAWG or other event and I'll give you more details. Kind regards, Steve. -- Steve Freegard Senior Product Owner Abusix Intelligence _

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-22 Thread Steve Freegard via mailop
ap domains, due to the very nature of them are more likely to be abused in this way and I will do what I can next week to address this and exclude them from reporting. I've already found that SORBS and Manitu don't treat Abuse and Postmaster role accounts differently. Kind regards,

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-22 Thread Steve Freegard via mailop
Hi Andrew, On 22/03/2020 16:05, Andrew C Aitchison wrote: On Sun, 22 Mar 2020, Steve Freegard via mailop wrote: I didn't design this to annoy people, I did it because it's useful for the internet in general because compromised accounts are a huge issue, and one that causes

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-24 Thread Steve Freegard via mailop
ould point out to anyone that doesn't already know that both you and Rob should have done the same as you both run competing services. And that's the last thing I'm going to say on this matter... Kind regards, Steve. -- Steve Freegard Senior Product Owner Abusix Intelligence ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-24 Thread Steve Freegard via mailop
On 24/03/2020 15:10, Chris via mailop wrote: On 2020-03-24 06:36, Steve Freegard via mailop wrote: I have great respect for you, but I didn't spend a considerable amount of development time without actually being absolutely certain about what I was doing.  Your experience is not rel

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-24 Thread Steve Freegard via mailop
und the HaveIBeenPwned API - see https://haveibeenpwned.com/API/v3#PwnedPasswords Kind regards, Steve. -- Steve Freegard Senior Product Owner Abusix Intelligence ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-24 Thread Steve Freegard via mailop
hope that this will help that situation. Kind regards, Steve. -- Steve Freegard Senior Product Owner Abusix Intelligence ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] [NOTICE] Significant Uptick in Traffic from a Japanese Network

2020-06-17 Thread Steve Freegard via mailop
ng on them.   They all have Dr. Web signatures in the headers stating that they're spam though Kind regards, Steve. -- Steve Freegard Senior Product Owner Abusix Intelligence On 17/06/2020 15:28, Michael Peddemors via mailop wrote: A significant activity alert was detected o

Re: [mailop] Delisting request from sendgrid customer about ip used in recent phishing campaign.

2020-08-14 Thread Steve Freegard via mailop
uld not verify this to be abusive"... Not being on top of the Abuse reports and having strong automation around them is inexcusable. Kind regards, Steve. -- Steve Freegard Senior Product Owner Abusix Intelligence ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Spamhaus Public Mirror Error Return Code Update

2021-03-04 Thread Steve Freegard via mailop
On 15/02/2021 15:43, Matthew Stith via mailop wrote: MailOP Folks, Wanted to get this out to you all for awareness for anyone who is using the Spamhaus public mirrors to query our DNSBLs. Beginning in March Spamhaus will start enforcing the follow error return codes for these news codes announce

Re: [mailop] How to detect fraud login in POP IMAP or SMTP?

2021-09-23 Thread Steve Freegard via mailop
o be novel to us and is updated every minute. There's a free trial available on our website if you're interested and you're welcome to contact me off-list. Kind regards, Steve. -- Steve Freegard Senior Product Owner Abusix Intelligence On 21/09/2021 16:08, Alessio Cecchi vi

Re: [mailop] Bro, do you even VERP?

2021-11-07 Thread Steve Freegard via mailop
tware or service somewhere that treated messages sent with VERP differently to regular messages?   Maybe this spammer discovered this (and I'm sure it's probably true somewhere) and uses it to improve their deliverability to some places. Kind regards, Steve. -- Steve Freegard Senior Pr

Re: [mailop] spamhaus blocking Linode IPv6 (2a01:7e01)

2021-11-25 Thread Steve Freegard via mailop
d " - abuseable web form 2a01:7e01::f03c:92ff:fee3:7758 - infected/compromised host 2a01:7e01::f03c:91ff:fece:24e8 - ""Sparkasse" " - compromised account Hope that helps. Kind regards, Steve. -- Steve Freegard Senior Product Owner Abusix Intelligence On 25/11/2021 1

Re: [mailop] Compromised email account trends

2023-02-23 Thread Steve Freegard via mailop
that: this particular email did not pop into my > inbox either. > > After having looked a bit deeper into this, it appears that Steve > Freegard replied directly and only to Jarland Donnell on 21 Feb, 12:10 > (timezone?). > > Jarland Donnell in turn has then replied publicly to the lis

Re: [mailop] UCEPROTECT L2 fact

2023-05-22 Thread Steve Freegard via mailop
is someone (bigger than personal) using > it? Or do you know someone who is using it? What is/can be > the reason to use it? > > thanks > > -- > Slavko > https://www.slavino.sk/ > ___ > mailop mailing list > mailop@mailop.org