Re: Rules for invisible div and 0pt font?

On Jun 18, 2019, at 2:21 AM, Giovanni Bechis wrote: > >> rawbody AC_HIDDEN_FONT /font-size\s*:\s*0\s*(?:em|pt|px|%)\s*;/ >> > There is T_HIDDEN_WORD on my sandbox > (https://ruleqa.spamassassin.org/20190617-r1861495-n/T_HIDDEN_WORD/detail) > I have just committed a more generic version.

Re: Zero-width rules?

On Jun 26, 2019, at 4:13 PM, Kevin A. McGrail wrote: > I don't know charset="UTF-8" is in the email and for the ZWNJ at least, that > was in windows-1256. Is ​ anything in UTF-8? > According to https://www.codetable.net/hex/200b and https://www.fileformat

Re: Zero-width rules?

On 6/26/2019 6:09 PM, Amir Caspi wrote: > On Jun 26, 2019, at 4:04 PM, Kevin A. McGrail > wrote: >> >> The sample you sent isn't encoded with a charset that will do anything >> with ​.  I think it's a literal string of "​" because the >> email is just plain text. > > I

Re: Zero-width rules?

On Jun 26, 2019, at 4:04 PM, Kevin A. McGrail wrote: > > The sample you sent isn't encoded with a charset that will do anything > with ​. I think it's a literal string of "​" because the > email is just plain text. I am using KAM.cf, yes. The plaintext portion of the email is just the literal

Re: Zero-width rules?

On Wed, 26 Jun 2019 14:07:00 -0600 Amir Caspi wrote: > John et al, > > I recall from a prior thread last year that there were supposed to be > some rules to check for zero-width joiner characters... but I'm > seeing spams recently that have these, but don't hit any such rules. > > Here's one spa

Re: Zero-width rules?

On 6/26/2019 4:07 PM, Amir Caspi wrote: > John et al, > > I recall from a prior thread last year that there were supposed to be some > rules to check for zero-width joiner characters... but I'm seeing spams > recently that have these, but don't hit any such rules. > > Here's one spample, where th

Re: spamass-milter reject?

On 26 Jun 2019, at 10:26, Matus UHLAR - fantomas wrote: >> Could it be what milter macros are sent by the MTA (postfix here) to the >> milter ? > > I don't think so, unless postfix doesn't allow milter to reject e-mail. > rejections with amavis-milter work properly with postfix. It does allow re

Re: spamass-milter reject?

On 26 Jun 2019, at 9:02, @lbutlr wrote: > Well, I want spam MARKED at 5.0, but I want it REJECTED at 10.0. It is a > subtle difference, but the majority of spam being delivered to users is in > the 10-100 range. I achieve that with amavisd-new being configured as an after queue content filter,

Zero-width rules?

John et al, I recall from a prior thread last year that there were supposed to be some rules to check for zero-width joiner characters... but I'm seeing spams recently that have these, but don't hit any such rules. Here's one spample, where the ZWJ entity #x200B is being used to try to sideste

Re: Freshclam Safebrowsing enabled for SA

On 6/13/2019 7:58 AM, Brent Clark wrote: > Good day Guys > > Some time has pass, and I was hoping to follow up with the community > if anyone has tested and / or tried Safebrowsing. Or has an opinion on > Safebrowsing. > > I enabled it, and I so far I have not picked up any false positives > for ma

Re: How to create my personal RBL

On Wed, 2019-06-26 at 10:43 +0200, hg user wrote: > Unfortunately a personal RBL may not cover all the use cases I'm > thinking about and looking at the source code of a plugin that queries > a sql or redis server can be interesting. > If you can't find source for an SQL plugin, contact me off lis

Re: How to create my personal RBL

Thank you everybody for your really interesting answers. In this moment I'm just collecting informations. I have one main problem: one of the engines used by our commercial antispam solution returns too many FPs. I'm gradually introducing spamassassin (included in zimbra) and I'd like to mitigate

Re: spamass-milter reject?

I simply overcame this by setting SA’s required_score parameter to a desired value in mail/spamassassin/local.cf On 25 Jun 2019, at 22:14, Matus UHLAR - fantomas wrote: I have different value in required_score than I use in -r flag. However that's sendmail installation. There's something stra

Re: How to create my personal RBL

On Jun 25, 2019, at 10:09 AM, David B Funk wrote: > It's pretty simple to set up your own local private DNS zones using rbldnsd. > Adding/updating those kinds of zones is simple as adding or editing lines in > a text file (as simple as echo ".this.bad.domain :127.0.0.2:" >> > my-zone-file ).

Re: spamass-milter reject?

On Jun 25, 2019, at 11:36 AM, Matt Anton wrote: > On 25 Jun 2019, at 2:57, @lbutlr wrote: > >> These are inbound messages being delivered to local users with high spam >> scores. I want Spamassassin-milter to honor the -r 10 flag setting to reject >> messages scoring over 10.0 > > After diggin