Re: Tests just hitting sending domains names?

2010-02-26 Thread Henrik K
On Fri, Feb 26, 2010 at 05:40:23PM -0500, dar...@chaosreigns.com wrote: > On 02/26, Ned Slider wrote: > > dar...@chaosreigns.com wrote: > >> The majority of spams making it through my filters in the last couple weeks > >> have been (confirmed) delivered by hotmail, *while* I was giving all those >

Re: Tests just hitting sending domains names?

2010-02-26 Thread Darxus
On 02/26, Ned Slider wrote: > dar...@chaosreigns.com wrote: >> The majority of spams making it through my filters in the last couple weeks >> have been (confirmed) delivered by hotmail, *while* I was giving all those >> emails a +1. >> >> I just went over the numbers again and set it to +3. > > A

Re: Tests just hitting sending domains names?

2010-02-26 Thread Ned Slider
dar...@chaosreigns.com wrote: The majority of spams making it through my filters in the last couple weeks have been (confirmed) delivered by hotmail, *while* I was giving all those emails a +1. I just went over the numbers again and set it to +3. Although it's easy to see the temptation in

Re: What's necessary to get "spamassassin --report" data to dnswl.org?

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 17:09 -0500, dar...@chaosreigns.com wrote: > On 02/26, Karsten Bräckelmann wrote: > > opinions there. If the code and idea is deemed good, eventually sign a > > CLA (assuming it's a non-trivial change), so the code can be accepted > > for upstream inclusion. > > Thanks. I'm

Re: What's necessary to get "spamassassin --report" data to dnswl.org?

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 22:59 +0100, Matthias Leisi wrote: > Am 26.02.10 22:53, schrieb Karsten Bräckelmann: > > > code? Then this would seem to be a general sketch: Write the plugin, > > while keeping DNSWL tightly in the loop to sync the process. Submit the > > Actually, Darxus is editor at dnsw

Re: What's necessary to get "spamassassin --report" data to dnswl.org?

2010-02-26 Thread Darxus
On 02/26, Karsten Bräckelmann wrote: > opinions there. If the code and idea is deemed good, eventually sign a > CLA (assuming it's a non-trivial change), so the code can be accepted > for upstream inclusion. Thanks. I'm looking more for the requirements for the code being accepted into SA. It lo

Re: What's necessary to get "spamassassin --report" data to dnswl.org?

2010-02-26 Thread Matthias Leisi
Karsten, Am 26.02.10 22:53, schrieb Karsten Bräckelmann: > code? Then this would seem to be a general sketch: Write the plugin, > while keeping DNSWL tightly in the loop to sync the process. Submit the Actually, Darxus is editor at dnswl.org and contributes a nameserver - he is very much in the

Re: What's necessary to get "spamassassin --report" data to dnswl.org?

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 16:40 -0500, dar...@chaosreigns.com wrote: > On 02/26, Karsten Bräckelmann wrote: > > I assume you're talking about reporting abuse? If you actually would go > > to dnswl.org, you'll see a Report Abuse link right hand, which tells you > > what's needed. > > No. Matthias (DNS

Re: What's necessary to get "spamassassin --report" data to dnswl.org?

2010-02-26 Thread Darxus
On 02/26, Karsten Bräckelmann wrote: > I assume you're talking about reporting abuse? If you actually would go > to dnswl.org, you'll see a Report Abuse link right hand, which tells you > what's needed. No. Matthias (DNSWL) asked me to "try to get us included in that process". If I create the ne

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Benny Pedersen
On Thu 25 Feb 2010 10:31:16 PM CET, Kai Schaetzl wrote I don't know to what you disagree, but SPF is not an anti-spam tool. Full stop. oh so what is spf then ? -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Re: What's necessary to get "spamassassin --report" data to dnswl.org?

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 16:09 -0500, dar...@chaosreigns.com wrote: > Beyond creating the plugin? I assume you're talking about reporting abuse? If you actually would go to dnswl.org, you'll see a Report Abuse link right hand, which tells you what's needed. If you want to regularly report spam sam

Re: Is there any Plugin to parse the “quoted email text” part in a mail (replied mail part)

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, LuKreme wrote: On 26-Feb-10 11:31, Karsten Bräckelmann wrote: Uhm, what's with your "real name"? (Rewritten in RE style.) How do you pronounce *82* f's in a row? "Fff" for 8.2 seconds. That's ten "f"s a second? Wow. Fast little F'er..

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, Benny Pedersen wrote: On Fri 26 Feb 2010 06:50:12 PM CET, Marc Perkel wrote And - SPF was originally introduced as a spam fighting solution. alot of lies out there Okay, this is getting stupid. Everyone on this thread, go to: http://www.openspf.org/Introduction Spa

Re: Tests just hitting sending domains names?

2010-02-26 Thread LuKreme
On 26-Feb-10 13:42, dar...@chaosreigns.com wrote: The majority of spams making it through my filters in the last couple weeks have been (confirmed) delivered by hotmail, *while* I was giving all those emails a +1. hotmail has always been a massive source of spam; enough so that when anyone com

What's necessary to get "spamassassin --report" data to dnswl.org?

2010-02-26 Thread Darxus
Beyond creating the plugin? (Also interested in the --revoke data.) -- "Of course there's strength in numbers. But there's strength in sharp weaponry too. Ironically, this lead to what we call 'civilization'." - spore http://www.ChaosReigns.com

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread LuKreme
On 26-Feb-10 11:24, Marc Perkel wrote: Jason Bertoch wrote: SPF wasn't meant to block spam, please stop asserting that. http://old.openspf.org/howworks.html Quoting the page: And as a user, SPF can help you sort the good from the bad. Reject mail that fails an SPF check. And? that's what I

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Joseph Brennan
Jason Bertoch wrote: Every modern mail solution allows an account holder to pop/imap to another account to pull in mail from somewhere else. But this introduces a security hole, where the password to an account on System A is stored on System B. Forwarding avoids that. Joseph Brennan Colu

Re: Off-topic? Off-list!

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, Karsten Bräckelmann wrote: Don't make me stomp my foot (Homer Simpson). LOL would you believe that someone in my girlfriend's computer class actually *said* to the instructor that famous Homerism, "Where is the ANY key?" Yes, really. And they are old enough to vot

Re: Is there any Plugin to parse the “quoted ema il text” part in a mail (replied mail part)

2010-02-26 Thread LuKreme
On 26-Feb-10 11:31, Karsten Bräckelmann wrote: Uhm, what's with your "real name"? (Rewritten in RE style.) How do you pronounce *82* f's in a row? "Fff" for 8.2 seconds. -- Do not meddle in the affairs of wizards for they are subtle and quick to ange

Tests just hitting sending domains names?

2010-02-26 Thread Darxus
The majority of spams making it through my filters in the last couple weeks have been (confirmed) delivered by hotmail, *while* I was giving all those emails a +1. I just went over the numbers again and set it to +3. I'm very curious what would happen if a full re-score was done with a test for

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Benny Pedersen
On Fri 26 Feb 2010 06:50:12 PM CET, Marc Perkel wrote And - SPF was originally introduced as a spam fighting solution. But they backed off when it was clear that it didn't fight spam. alot of lies out there -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Re: Bayes and Time of Day

2010-02-26 Thread Karsten Bräckelmann
On Thu, 2010-02-25 at 22:20 -0500, Jason Bertoch wrote: > Although I grasp the concept of Bayes in the SA system, I don't fully > understand how and which tokens it grabs from mails passed through SA. > Although many servers deal with 24-hour customers, mine is 98% business > only 8AM to 5PM.

Re: Is there any Plugin to parse the “quoted email text” part in a mail (replied mail part)

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 14:15 +0530, testsubbitesdsf{82} wrote: > Hi Uhm, what's with your "real name"? (Rewritten in RE style.) How do you pronounce *82* f's in a row? > Is there any Plugin to parse the “quoted email text” part in a mail > (replied mail part) . > > I read the document that you

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Marc Perkel
Jason Bertoch wrote: SPF wasn't meant to block spam, please stop asserting that. http://old.openspf.org/howworks.html Quoting the page: And as a user, SPF can help you sort the good from the bad. Reject mail that fails an SPF check.

Re: Off-topic? Off-list!

2010-02-26 Thread Karsten Bräckelmann
On Fri, 2010-02-26 at 09:50 -0500, Charles Gregory wrote: > On Fri, 26 Feb 2010, Karsten Bräckelmann wrote: > > I know I'm tired from repeatedly deleting clearly off-topic posts > > without even caring to open them. Wonder how the majority of subscribers > > feels about it. > > Well, there was a p

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Marc Perkel
Matus UHLAR - fantomas wrote: LuKreme wrote: Here's where spf is useful. On 25.02.10 15:31, Marc Perkel wrote: Except that it breaks forwarded email. Matus UHLAR - fantomas wrote: I have never seen any occurence of SPF breaking forwarding.

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Marc Perkel
Matus UHLAR - fantomas wrote: On 25.02.10 15:22, Marc Perkel wrote: I'd like to find a way to get people to get their FCrDNS correct. The way I see it if they can't get RDNS correct they aren't going to get SPF correct. Unfortunately I get a lot of ham from IPs with no RDNS. fcrdn

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Marc Perkel
Jason Bertoch wrote: On 2/25/2010 8:08 PM, Marc Perkel wrote: The forward issue is definitely an annoyance. But SPF has a problem in that as the supporters admit, it doesn't block spam, and it can't be used as a white rule because spammers often use SPF correctly. I'm not sure what you mea

Re: tflags userconf

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, RW wrote: I'm guessing it's also used to exclude rules from score optimization. There is a comment in 25_spf.cf: # these are "userconf" so that scores are set by hand tflags SPF_PASS nice userconf net tflags SPF_HELO_PASSnice userconf net Ah. I d

Re: tflags userconf

2010-02-26 Thread RW
On Fri, 26 Feb 2010 10:20:06 -0500 (EST) Charles Gregory wrote: > I happened to notice that 'tflags userconf' was specified for a few > tests that, as far as I could tell have on user configurable > parameters. > > Example (3.2.5): > > 25_spf.cf:tflags SPF_PASS nice userc

tflags userconf

2010-02-26 Thread Charles Gregory
Hallo! Back on topic :) I happened to notice that 'tflags userconf' was specified for a few tests that, as far as I could tell have on user configurable parameters. Example (3.2.5): 25_spf.cf:tflags SPF_PASS nice userconf So what 'user configuration' is needed for

Re: Off-topic? Off-list!

2010-02-26 Thread Charles Gregory
On Fri, 26 Feb 2010, Karsten Bräckelmann wrote: I know I'm tired from repeatedly deleting clearly off-topic posts without even caring to open them. Wonder how the majority of subscribers feels about it. Well, there was a posting with some spam-related SPF stats the other day that proved very i

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread LuKreme
On 25-Feb-2010, at 17:48, Lee Dilkie wrote: One of the problems is that in SA, an SPF_FAIL (hard) doesn't score much above a SPF_SOFTFAIL but in my view it should. If an admin has made the effort to setup a hardfail record, it should be trusted. There are far too many incompetent admins to

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Mike Cardwell
On 26/02/2010 14:20, LuKreme wrote: On 26-Feb-2010, at 07:13, LuKreme wrote: SPF_PASS 0.001 SPF_fail 5.0 whitelist_from_spf *...@ebay.com whitelist_from_spf *...@paypal.com You forgot "whitelist_from_spf *...@*.apache.org" -- Mike Cardwell: UK based IT Consultant, Perl developer, Linux

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread LuKreme
On 26-Feb-2010, at 07:13, LuKreme wrote: SPF_PASS 0.001 SPF_fail 5.0 whitelist_from_spf *...@ebay.com whitelist_from_spf *...@paypal.com -- I WILL NOT AIM FOR THE HEAD Bart chalkboard Ep. 8F13

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread LuKreme
On 25-Feb-2010, at 18:08, Marc Perkel wrote: it doesn't block spam, But as I said the absence of SPF can be used to block the most harmful and risky of spams. and it can't be used as a white rule because spammers often use SPF correctly. It can't be used INDISCRIMINATELY as a whitelis

RE: Off Topic - SPF - What a Disaster

2010-02-26 Thread Rick Cooper
Original Message From: Marc Perkel [mailto:m...@perkel.com] Sent: Thursday, February 25, 2010 6:11 PM To: Rick Cooper Cc: 'ram'; users@spamassassin.apache.org Subject: Re: Off Topic - SPF - What a Disaster > Rick Cooper wrote: >> >> >>> The anti-SPF bandwagon is not ego driven but result

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Mike Cardwell
On 25/02/2010 23:31, Marc Perkel wrote: As someone who forwards email what I see is this. Sender has restrictive SPF. Recipient server enforces SPF. Mail coming through me bounces. Then they call me to complain and I say, I didn't bounce it. Get rid of your SPF nd your email will be received.

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Matus UHLAR - fantomas
> >> LuKreme wrote: > >>> Here's where spf is useful. > > > > On 25.02.10 15:31, Marc Perkel wrote: > >> Except that it breaks forwarded email. > Matus UHLAR - fantomas wrote: > > I have never seen any occurence of SPF breaking forwarding. On 26.02.10 09:46, Per Jessen wrote: > Really? Do you k

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Per Jessen
Matus UHLAR - fantomas wrote: >> LuKreme wrote: >>> Here's where spf is useful. > > On 25.02.10 15:31, Marc Perkel wrote: >> Except that it breaks forwarded email. > > I have never seen any occurence of SPF breaking forwarding. Really? Do you know which problem SRS was meant to address then?

Is there any Plugin to parse the “quoted email tex t” part in a mail (replied mail part)

2010-02-26 Thread testsubbitesdsffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
Hi Is there any Plugin to parse the “quoted email text” part in a mail (replied mail part) . I read the document that you are performing some test cases against the mail to identify a message is Spam or not. I have noticed Parse “quoted email text” is one test case in your test case list,

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Matus UHLAR - fantomas
> LuKreme wrote: >> Here's where spf is useful. On 25.02.10 15:31, Marc Perkel wrote: > Except that it breaks forwarded email. I have never seen any occurence of SPF breaking forwarding. But if you forward e-mail from someone and you are pretending to be him, we may reject it because you are fo

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Matus UHLAR - fantomas
On 25.02.10 17:08, Marc Perkel wrote: > The forward issue is definitely an annoyance. But SPF has a problem in > that as the supporters admit, it doesn't block spam, and it can't be > used as a white rule because spammers often use SPF correctly. Marc, why are YOU trolling? Are you attemptin

Re: Off Topic - SPF - What a Disaster

2010-02-26 Thread Matus UHLAR - fantomas
On 25.02.10 15:22, Marc Perkel wrote: > I'd like to find a way to get people to get their FCrDNS correct. The > way I see it if they can't get RDNS correct they aren't going to get SPF > correct. Unfortunately I get a lot of ham from IPs with no RDNS. fcrdns can't be used to filter spam becaus