Re: USER_IN_WHITELIST

2016-07-07 Thread Sidney Markowitz
Lorenzo Thurman wrote on 8/07/16 9:26 AM: > Thanks for the info. Does anyone know how I can use whitelistfrom_rcvd? I > can't find any clear answers via Google. > Excuse my typo for the correct spelling whitelist_from_rcvd. To use it, look at the legitimate emails that you want to whitelist an

Re: USER_IN_WHITELIST

2016-07-07 Thread Reindl Harald
Am 07.07.2016 um 23:26 schrieb Lorenzo Thurman: Thanks for the info. Does anyone know how I can use whitelistfrom_rcvd? I can't find any clear answers via Google. besides the typo the same way as the other whitelist options the only difference is the second param with is the DNS-PTR of the

Re: USER_IN_WHITELIST

2016-07-07 Thread Lorenzo Thurman
"My Break-Dancing days are over, but there's always the Funky Chicken" -- The Full Monty > On Jul 7, 2016, at 3:57 PM, Sidney Markowitz wrote: > > Lorenzo Thurman wrote on 8/07/16 3:03 AM: >>> On Jul 7, 2016, at 8:14 AM, Antony Stone >>> wrote: >>> \.microsoft\.com$ will match anything endi

Re: USER_IN_WHITELIST

2016-07-07 Thread Sidney Markowitz
Lorenzo Thurman wrote on 8/07/16 3:03 AM: >> On Jul 7, 2016, at 8:14 AM, Antony Stone >> wrote: >> \.microsoft\.com$ will match anything ending in ".microsoft.com" RW already pointed this out, but to make sure nobody reading this thread misses it, the above is wrong because whitelist does not us

Re: USER_IN_WHITELIST

2016-07-07 Thread RW
On Thu, 7 Jul 2016 10:03:37 -0500 Lorenzo Thurman wrote: y > > > On Jul 7, 2016, at 8:14 AM, Antony Stone > > wrote: > > There's a big difference between subdomains, and domains with > > letters in front of "microsoft". > > > > \.microsoft\.com$ will match anything ending in ".microsoft.com" >

Re: USER_IN_WHITELIST

2016-07-07 Thread Lorenzo Thurman
"My Break-Dancing days are over, but there's always the Funky Chicken" -- The Full Monty > On Jul 7, 2016, at 8:14 AM, Antony Stone > wrote: > > On Thursday 07 July 2016 at 15:08:44, Lorenzo Thurman wrote: > >>> On Jul 7, 2016, at 7:15 AM, Reindl Harald wrote: Am 07.07.2016 um 14:12 s

Re: USER_IN_WHITELIST

2016-07-07 Thread RW
On Thu, 7 Jul 2016 08:08:44 -0500 Lorenzo Thurman wrote: > > > > well the ^ followed by .* is also pointless > > > I see. Thanks for the tip, It wasn't really a tip. The globs (wildcards) get converted into regularly expressions that aren't quite as mimimalist as the could be - but that's n

Re: USER_IN_WHITELIST

2016-07-07 Thread Antony Stone
On Thursday 07 July 2016 at 15:08:44, Lorenzo Thurman wrote: > > On Jul 7, 2016, at 7:15 AM, Reindl Harald wrote: > >> Am 07.07.2016 um 14:12 schrieb Joe Quinn: > >> In addition to the above, it's easy for a spammer to register something > >> like kajsdhfkjasghdskghlaskfhmicrosoft.com which would

Re: USER_IN_WHITELIST

2016-07-07 Thread RW
On Thu, 7 Jul 2016 14:15:18 +0200 Reindl Harald wrote: > should at least look similar to that: > ^.*\.microsoft\.com$ > > well the ^ followed by .* is also pointless It's generated from a glob in the configuration.

Re: USER_IN_WHITELIST

2016-07-07 Thread Lorenzo Thurman
"My Break-Dancing days are over, but there's always the Funky Chicken" -- The Full Monty > On Jul 7, 2016, at 7:15 AM, Reindl Harald wrote: > > > >> Am 07.07.2016 um 14:12 schrieb Joe Quinn: >>> On 7/6/2016 11:42 PM, Bill Cole wrote: >>> On 6 Jul 2016, at 23:10, lorenzo wrote: >>> >>> [...

Re: USER_IN_WHITELIST

2016-07-07 Thread Reindl Harald
Am 07.07.2016 um 14:12 schrieb Joe Quinn: On 7/6/2016 11:42 PM, Bill Cole wrote: On 6 Jul 2016, at 23:10, lorenzo wrote: [...] The output from spamassassin -t -D < In-whitelist.txt gives the answer, I believe: address hefg...@hkjhkjhk.onmicrosoft.com matches whitelist or blacklist regexp: ^

Re: USER_IN_WHITELIST

2016-07-07 Thread Joe Quinn
On 7/6/2016 11:42 PM, Bill Cole wrote: On 6 Jul 2016, at 23:10, lorenzo wrote: [...] The output from spamassassin -t -D < In-whitelist.txt gives the answer, I believe: address hefg...@hkjhkjhk.onmicrosoft.com matches whitelist or blacklist regexp: ^.*microsoft\.com$ Very sneaky. I think I