Re: Using -t to test rule changes

2024-05-08 Thread Benny Pedersen
Alex skrev den 2024-05-09 01:18: What can be done to be able to process a quarantined email again so I can make adjustments to prevent it from being quarantined? is not an spamassassin issue, ask glue maillists

Re: Whitelist rules should never pass on SPF fail

2024-05-08 Thread Benny Pedersen
kurt.va1der.ca via users skrev den 2024-05-08 21:53: I received a (relatively) well crafted Phishing email today. It was clearly a well planned campaign. The Spamassassin score was as follows: X-Spam-Status: No, score=-0.4 required=5.0 tests=GOOG_REDIR_NORDNS=0.001, HTML_FONT_LOW_CONTRAST=

Using -t to test rule changes

2024-05-08 Thread Alex
Hi, I'm using the latest version of SA from trunk (although I don't think that matters) and trying to make adjustments to rules on a particular false-positive email that was quarantined by amavis so I can adjust the rules to prevent it from being quarantined. The problem is that amavis manipulates

Re: Whitelist rules should never pass on SPF fail

2024-05-08 Thread Noel Butler
On 09/05/2024 05:57, Jarland Donnell wrote: That's easy though at least. Set the DNSWL rule to 0. I appreciate their effort but it's simply not an accurate way to determine the value of an email in 2024. It's never been the deciding factor between whether or not an email was spam, in any email

Re: Whitelist rules should never pass on SPF fail

2024-05-08 Thread Loren Wilton
Obviously the right way is for the master rules to be adjusted. But if you want a local fix, try something like this: score RCVD_IN_DNSWL_HI -0.001 metaMY_RCVD_IN_DNSWL_HIRCVD_IN_DNSWL_HI && !SPF_FAIL score MY_RCVD_IN_DNSWL_HI-5 describeMY_RCVD_IN_DNSWL_HI

Re: Whitelist rules should never pass on SPF fail

2024-05-08 Thread Jarland Donnell
That’s easy though at least. Set the DNSWL rule to 0. I appreciate their effort but it’s simply not an accurate way to determine the value of an email in 2024. It’s never been the deciding factor between whether or not an email was spam, in any email I’ve audited in the last decade. > On Wednes

Whitelist rules should never pass on SPF fail

2024-05-08 Thread kurt.va1der.ca via users
I received a (relatively) well crafted Phishing email today. It was clearly a well planned campaign. The Spamassassin score was as follows: X-Spam-Status: No, score=-0.4 required=5.0 tests=GOOG_REDIR_NORDNS=0.001, HTML_FONT_LOW_CONTRAST=0.001,HTML_MESSAGE=0.001, NORDNS_LOW_CONTRAST=0