Re: SA seems powerless against marketing emails for SEO/web development

2021-04-23 Thread RW
On Thu, 22 Apr 2021 14:21:05 -0400 Steve Dondley wrote: > I'm still getting like 3 to half > dozen a day. Here's one example: https://paste.debian.net/1194735/ Apparently it already expired.

Re: Why single periods in regex in spamassassin rules?

2021-04-23 Thread RW
On Fri, 23 Apr 2021 13:52:40 -0500 (CDT) David B Funk wrote: > On Fri, 23 Apr 2021, Steve Dondley wrote: > > > I'm looking at KAM.cf. There is this rule: > > > > body__KAM_WEB2 /INDIA based > > IT|indian.based.website|certified.it.company/i > > > > I'm wondering if there is a good reason wh

Re: Script or command for testing new rules to ensure new rules don't generate false positives/negatives?

2021-04-23 Thread Martin Gregorie
On Fri, 2021-04-23 at 16:28 -0400, Steve Dondley wrote: > I'm experimenting with writing a library of my own SA rules and > scores. > I do this on a separate computer, which has Spamassassin installed but not linked into anything else. It also has a copy of all the live SA configuration files. Alon

Re: KAM_DMARC_REJECT on internal emails

2021-04-23 Thread RW
On Thu, 22 Apr 2021 14:15:07 +0200 Matus UHLAR - fantomas wrote: > >> On 21.04.21 00:11, RW wrote: > >> >Anything that enters through through the remote trusted network > >> >and hits ALL_TRUSTED will almost certainly pass whatever > >> >authentication mechanism are set-up for the domain. > >> >

Script or command for testing new rules to ensure new rules don't generate false positives/negatives?

2021-04-23 Thread Steve Dondley
I'm experimenting with writing a library of my own SA rules and scores. I'd like to be sure that the rules I write don't turn ham into spam and vice versa. I figured the best way to do this would be to run SA against an existing collection of ham and spam to make sure emails are still scored ac

Re: Why single periods in regex in spamassassin rules?

2021-04-23 Thread David B Funk
On Fri, 23 Apr 2021, Steve Dondley wrote: I'm looking at KAM.cf. There is this rule: body__KAM_WEB2 /INDIA based IT|indian.based.website|certified.it.company/i I'm wondering if there is a good reason why a singe period is used instead of something like \s+ which would catch multiple sp

Re: SA seems powerless against marketing emails for SEO/web development

2021-04-23 Thread Benny Pedersen
On 2021-04-23 17:43, Steve Dondley wrote: I could add another point between BAYES_999 and BAYES_99 scores but that seems reactionary. Is there a better way? Should I thrown in another point for certain keywords in marketing emails like these? add score to tags that score possitive 0.0 until it

Re: Why single periods in regex in spamassassin rules?

2021-04-23 Thread Steve Dondley
On 2021-04-23 01:37 PM, Henrik K wrote: On Fri, Apr 23, 2021 at 01:03:33PM -0400, Steve Dondley wrote: I'm looking at KAM.cf. There is this rule: body__KAM_WEB2 /INDIA based IT|indian.based.website|certified.it.company/i I'm wondering if there is a good reason why a singe period is used

Re: Why single periods in regex in spamassassin rules?

2021-04-23 Thread Henrik K
On Fri, Apr 23, 2021 at 01:03:33PM -0400, Steve Dondley wrote: > I'm looking at KAM.cf. There is this rule: > > body__KAM_WEB2 /INDIA based > IT|indian.based.website|certified.it.company/i > > I'm wondering if there is a good reason why a singe period is used instead > of something like \s+

Re: AW: how to disable spamcheck for Outgoing mail

2021-04-23 Thread Benny Pedersen
On 2021-04-23 19:19, mau...@gmx.ch wrote: submission inet n - y - -smtpd -o content_filter=spamassassin yes this are always enable, please how I can fix that sending Email don’t scan from Spamassasin. wake up :=) content_filter= in submission is not incomming ma

Re: how to disable spamcheck for Outgoing mail

2021-04-23 Thread Benny Pedersen
On 2021-04-23 19:09, Matus UHLAR - fantomas wrote: On 2021-04-23 01:02 PM, mau...@gmx.ch wrote: however, private IP ranges like 192.168.0.0/16 are not checked for DNS blocklists. default spamassassin DO scan rfc1918, but there is no rbl that lists ips in rfc1918, its a dns waste to test i

AW: how to disable spamcheck for Outgoing mail

2021-04-23 Thread mauric
On 2021-04-23 01:02 PM, mau...@gmx.ch wrote: >trusted_networks 192.168.1.0/24 37.120.190.188/22 >>Are you using postfix? If so, you can do something like this: >> >>submission inet n - y - -smtpd >> -o content_filter=spamassassin yes this are

Re: how to disable spamcheck for Outgoing mail

2021-04-23 Thread Benny Pedersen
On 2021-04-23 19:05, Steve Dondley wrote: submission inet n - y - -smtpd -o content_filter=spamassassin this enables spamassassin, he asked how to not run spamassassin -o content_filter= is valid in master.cf its free as the wan ip will be blocklisted if conten

Re: how to disable spamcheck for Outgoing mail

2021-04-23 Thread Benny Pedersen
On 2021-04-23 19:02, mau...@gmx.ch wrote: trusted_networks 192.168.28. what rbl do list rfc1918 ips ? whitelist cant happen on sending servers, its done on recipient servers and 192.168.0.0/16 is supported in spamasasssin, ips there is not blacklisted since it cant be routed on network to p

Re: Why single periods in regex in spamassassin rules?

2021-04-23 Thread Matus UHLAR - fantomas
On 23.04.21 13:03, Steve Dondley wrote: I'm looking at KAM.cf. There is this rule: body__KAM_WEB2 /INDIA based IT|indian.based.website|certified.it.company/i I'm wondering if there is a good reason why a singe period is used instead of something like \s+ which would catch multiple space

Re: how to disable spamcheck for Outgoing mail

2021-04-23 Thread Matus UHLAR - fantomas
On 2021-04-23 01:02 PM, mau...@gmx.ch wrote: Please how its possible to disable the spam check from sending mails from "privat to public" network? I was realy thinking if enable the trusted network this will pass over. trusted_networks 192.168.28. trusted_networks means something different -

Re: how to disable spamcheck for Outgoing mail

2021-04-23 Thread Steve Dondley
On 2021-04-23 01:02 PM, mau...@gmx.ch wrote: > Hello > > Please how its possible to disable the spam check from sending mails from > "privat to public" network? > > I was realy thinking if enable the trusted network this will pass over. > > trusted_networks 192.168.28. > > thanks Ar

Why single periods in regex in spamassassin rules?

2021-04-23 Thread Steve Dondley
I'm looking at KAM.cf. There is this rule: body__KAM_WEB2 /INDIA based IT|indian.based.website|certified.it.company/i I'm wondering if there is a good reason why a singe period is used instead of something like \s+ which would catch multiple spaces whereas a singe period doesn't.

how to disable spamcheck for Outgoing mail

2021-04-23 Thread mauric
Hello Please how its possible to disable the spam check from sending mails from "privat to public" network? I was realy thinking if enable the trusted network this will pass over. trusted_networks 192.168.28. thanks

Re: SA seems powerless against marketing emails for SEO/web development

2021-04-23 Thread Steve Dondley
I could add another point between BAYES_999 and BAYES_99 scores but that seems reactionary. Is there a better way? Should I thrown in another point for certain keywords in marketing emails like these? add score to tags that score possitive 0.0 until it gives 5.0 and above I like this idea.