Re: df.uribl.com

2019-03-02 Thread Bill Cole
On 2 Mar 2019, at 9:45, John Schmerold wrote: I subscribed to uribl's datafeed service and have read their usage documentation on http://uribl.com/usage.shtml I think I understand how it works, but I am confused by how things work with the default 25_uribl.cf file if I want to change the rhs

Re: df.uribl.com

2019-03-02 Thread John Hardin
On Sat, 2 Mar 2019, Axb wrote: On 3/2/19 7:35 PM, John Hardin wrote: On Sat, 2 Mar 2019, John Schmerold wrote: I subscribed to uribl's datafeed service and have read their usage documentation on http://uribl.com/usage.shtml I think I understand how it works, but I am confused by how things

Re: df.uribl.com

2019-03-02 Thread Axb
On 3/2/19 7:35 PM, John Hardin wrote: On Sat, 2 Mar 2019, John Schmerold wrote: I subscribed to uribl's datafeed service and have read their usage documentation on http://uribl.com/usage.shtml I think I understand how it works, but I am confused by how things work with the default 25_uribl.c

Re: df.uribl.com

2019-03-02 Thread John Hardin
On Sat, 2 Mar 2019, John Schmerold wrote: I subscribed to uribl's datafeed service and have read their usage documentation on http://uribl.com/usage.shtml I think I understand how it works, but I am confused by how things work with the default 25_uribl.cf file if I want to change the rhsbl_zo

spamassassin -report says Wide character in syswrite at /usr/lib/i386-linux-gnu/perl/5.22/IO/Handle.pm line 220.

2019-03-02 Thread darxus
I'm trying to use spamassassin's ability to report an email as spam to various folks who collect that kind of data: https://wiki.apache.org/spamassassin/ReportingSpam I'm piping the email to "spamassassin -report", and the result I get is: Wide character in syswrite at /usr/lib/i386-linux-gnu/per

Re: df.uribl.com

2019-03-02 Thread RW
On Sat, 2 Mar 2019 15:24:12 + RW wrote: > Either way should work. Overriding is cleaner if you want to keep the > default score for one or more rules. It's also a good idea just in case a URIBL rule ever get used in a meta rule.

Re: df.uribl.com

2019-03-02 Thread RW
On Sat, 2 Mar 2019 08:45:57 -0600 John Schmerold wrote: > I subscribed to uribl's datafeed service and have read their usage > documentation on http://uribl.com/usage.shtml > > I think I understand how it works, but I am confused by how things > work with the default 25_uribl.cf file if I want t

Re: df.uribl.com

2019-03-02 Thread John Schmerold
On 3/2/2019 9:04 AM, Axb wrote: On 3/2/19 3:45 PM, John Schmerold wrote: I subscribed to uribl's datafeed service and have read their usage documentation on http://uribl.com/usage.shtml I think I understand how it works, but I am confused by how things work with the default 25_uribl.cf file i

Re: df.uribl.com

2019-03-02 Thread Axb
On 3/2/19 3:45 PM, John Schmerold wrote: I subscribed to uribl's datafeed service and have read their usage documentation on http://uribl.com/usage.shtml I think I understand how it works, but I am confused by how things work with the default 25_uribl.cf file if I want to change the rhsbl_zone

Re: Spam rule for HTTP/HTTPS request to sender's root domain

2019-03-02 Thread John Schmerold
Mike: If you want a tester, I am happy to join the effort, I see little harm in assigning 0.75 to the results. There are quite a few email only domains we end up whitelist_auth'ing them and all is well. John Schmerold Katy Computer Systems, Inc https://katycomputer.com St Louis On 2/28/2019

df.uribl.com

2019-03-02 Thread John Schmerold
I subscribed to uribl's datafeed service and have read their usage documentation on http://uribl.com/usage.shtml I think I understand how it works, but I am confused by how things work with the default 25_uribl.cf file if I want to change the rhsbl_zone to _CUSTID.df.uribl.com We don't want

Re: Spam rule for HTTP/HTTPS request to sender's root domain

2019-03-02 Thread RW
On Fri, 01 Mar 2019 22:09:01 + Rupert Gallagher wrote: > Case study: > > example.com bans any e-mail sent from its third levels up, and does > it by spf. > > spf-banned.example.com sent mail, and my SA at server.com adds a big > fat penalty, high enough to bounch it. example.com has a TXT