Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Dave Pooser
On 9/10/12 7:36 PM, "Noel Butler" wrote: >I wouldn't. > >I've seen multiple spam from messagelabs As I understand it, trusted_networks doesn't mean "networks you trust not to send spam;" rather, it means "networks you trust not to have forged their Received: headers." Adding the messagelabs serv

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread John Hardin
On Tue, 11 Sep 2012, Noel Butler wrote: On Mon, 2012-09-10 at 18:34 +, Helmut Schneider wrote: If I understood you correctly I'd need to add all relays of MessageLabs to trusted_networks and also track any IP address changes... I wouldn't. I've seen multiple spam from messagelabs Mult

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Noel Butler
On Mon, 2012-09-10 at 18:34 +, Helmut Schneider wrote: > If I understood you correctly I'd need to add all relays of MessageLabs > to trusted_networks and also track any IP address changes... > I wouldn't. I've seen multiple spam from messagelabs signature.asc Description: This is a di

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Helmut Schneider wrote: > Kris Deugau wrote: > > > Helmut Schneider wrote: > > but if their support refuses to tell you, I'd be looking at > > switching providers > > I guess they would if they knew themselves. But project "switch" is > ongoing... :) http://images.messagelabs.com/EmailResources

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Matthias Leisi wrote: > On Mon, Sep 10, 2012 at 8:34 PM, Helmut Schneider > wrote: > > >> It looks like RCVD_IN_DNSWL_MED examines "firstuntrusted" and if he > >> trusts his MX/relays correctly then this shouldn't be happening. > > In general, setting up the trustpath correctly is sufficient. >

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Kris Deugau wrote: > Helmut Schneider wrote: > > If I understood you correctly I'd need to add all relays of > > MessageLabs to trusted_networks and also track any IP address > > changes... > > If you don't have that info, and their support refuses to tell you, > tailing your inbound logs for a w

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Matthias Leisi
On Mon, Sep 10, 2012 at 8:34 PM, Helmut Schneider wrote: >> It looks like RCVD_IN_DNSWL_MED examines "firstuntrusted" and if he >> trusts his MX/relays correctly then this shouldn't be happening. In general, setting up the trustpath correctly is sufficient. > If I understood you correctly I'd n

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Kris Deugau
Helmut Schneider wrote: > If I understood you correctly I'd need to add all relays of MessageLabs > to trusted_networks and also track any IP address changes... If you're using them as your primary spam filter provider, you should have information somewhere on which IP block(s) your mail will go t

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Dave Funk wrote: > On Mon, 10 Sep 2012, John Hardin wrote: > > > On Mon, 10 Sep 2012, Helmut Schneider wrote: > > > > > Short story: > > > Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? > > > > > > Long story: > > > We are using an external provider to filter SPAM. We also use SA > > > inte

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
John Hardin wrote: > On Mon, 10 Sep 2012, Helmut Schneider wrote: > > > Short story: > > Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? > > > > Long story: > > We are using an external provider to filter SPAM. We also use SA > > internally. Sometimes mails are not recognized as SPAM external

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Kris Deugau
Dave Funk wrote: > If he's got his "trusted_networks" configured correctly (has his MX/relays > listed) shouldn't that take care of the problem? > > It looks like RCVD_IN_DNSWL_MED examines "firstuntrusted" and if he trusts > his MX/relays correctly then this shouldn't be happening. Yes, exactly.

Re: Spamreport plugin for email clients

2012-09-10 Thread Kris Deugau
Ram wrote: > When I ask users to send misclassified mails ( FN or FP ) as an > attachment , they often dont get it right. > Also attaching from outlook , windows live mail etc is a big pain Outlook is not Windows Live Mail. Backend code rewrites notwithstanding, Windows Live Mail (Windows 7/Vist

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Dave Funk
On Mon, 10 Sep 2012, John Hardin wrote: On Mon, 10 Sep 2012, Helmut Schneider wrote: Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally a

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread John Hardin
On Mon, 10 Sep 2012, Helmut Schneider wrote: Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally and forwarded to SA. The mailrelays of the

Re: Spamreport plugin for email clients

2012-09-10 Thread Dave Warren
On 9/10/2012 1:01 PM, Ram wrote: When I ask users to send misclassified mails ( FN or FP ) as an attachment , they often dont get it right. Also attaching from outlook , windows live mail etc is a big pain Is there an outlook plugin people can use to report spam , that can come to a URL or by

Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Hi, Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally and forwarded to SA. The mailrelays of the external provider are listed in RCVD_IN_DNS

Re: Spamreport plugin for email clients

2012-09-10 Thread Axb
On 09/10/2012 01:01 PM, Ram wrote: When I ask users to send misclassified mails ( FN or FP ) as an attachment , they often dont get it right. Also attaching from outlook , windows live mail etc is a big pain Is there an outlook plugin people can use to report spam , that can come to a URL or b

Spamreport plugin for email clients

2012-09-10 Thread Ram
When I ask users to send misclassified mails ( FN or FP ) as an attachment , they often dont get it right. Also attaching from outlook , windows live mail etc is a big pain Is there an outlook plugin people can use to report spam , that can come to a URL or by mail ? Thanks Ram