Re: Off-topic - IRS.gov Postmaster

2017-02-01 Thread Ruga
postmas...@irs.gov On Wed, Feb 1, 2017 at 10:02 PM, Kevin A. McGrail <'kmcgr...@pccc.com'> wrote: All: I've got some email deliverability issues I'm trying to work through. Anyone have a contact for a postmaster for IRS.gov? Likely a 10 minute issue. Regards, KAM

Re: fake base64 encoding

2017-02-01 Thread Pedro David Marco
Correction:  Some Outlook versions do show the email just as Thunderbird does.. so most users can see the email but SA... From: Pedro David Marco To: Kevin A. McGrail ; SA Mailing List Sent: Thursday, February 2, 2017 5:30 AM Subject: Re: fake base64 encoding Thanks Kevin, I did

Re: fake base64 encoding

2017-02-01 Thread Pedro David Marco
Thanks Kevin, I did a similar rule to detect it but with higher score (3) since we are seeing a huge LinkedIn Phishing campaign using this technique, that on purpose or by mistake is evading most SA rules... I agree that Thunderbird may be doing it wrong. Outlook seems to do it right. >I would

Re: fake base64 encoding

2017-02-01 Thread Kevin A. McGrail
On 2/1/2017 9:35 PM, Kevin A. McGrail wrote: I agree. The test does not trigger The second test will trigger utf8_mode on Feb 1 21:29:32.246 [26958] dbg: message: HTML::Parser utf8_mode on (assumed UTF-8 octets) Content-Type: text/html; charset="utf-8" It makes sense since SA tries to decod

Re: fake base64 encoding

2017-02-01 Thread Kevin A. McGrail
On 2/1/2017 6:17 AM, Pedro David Marco wrote: Hi! i have noticed that when an email contains this (wrong) headers: Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 as SMTP headers, not MIME headers, and the email body is not base64 enconded, email clients as Thunderb

Off-topic - IRS.gov Postmaster

2017-02-01 Thread Kevin A. McGrail
All: I've got some email deliverability issues I'm trying to work through. Anyone have a contact for a postmaster for IRS.gov? Likely a 10 minute issue. Regards, KAM

Re: _WARN message with perl-Encode

2017-02-01 Thread Martin Gregorie
On Wed, 2017-02-01 at 13:17 -0500, Alex wrote: > Hi all, > > I have a warning/error that appears to be the result of a recent > fedora25 update that is related to spamassassin, and thought someone > might know of the cause? > Last night's logwatch contained these errors for the spamd service on F

_WARN message with perl-Encode

2017-02-01 Thread Alex
Hi all, I have a warning/error that appears to be the result of a recent fedora25 update that is related to spamassassin, and thought someone might know of the cause? Feb 1 13:12:33 mail01 amavis[2012]: (02012-04) _WARN: Use of uninitialized value in subroutine entry at /usr/lib64/perl5/vendor_p

Re: How does sa know when pyzor sees a spam msg?

2017-02-01 Thread Harry Putnam
Matus UHLAR - fantomas writes: [...] Harry wrote: >>How is it all found by procmail? Matus UHLAR responded: > exactly as you use above. It also does not matter if you use pyzor, all > checks SA uses are evaluated that way. > > Simply install pyzor (razor, dcc, ...), activate SA plugins and let

fake base64 encoding

2017-02-01 Thread Pedro David Marco
Hi! i have noticed that when an email contains this (wrong) headers: Content-Type: text/html; charset="utf-8"Content-Transfer-Encoding: base64 as SMTP headers, not MIME headers, and the email body is not base64 enconded, email clients as Thunderbird show the content correctly butSpamAssasin body