Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-27 Thread Bill Cole
On 2025-05-27 at 09:54:38 UTC-0400 (Tue, 27 May 2025 15:54:38 +0200) Vincent Lefevre is rumored to have said: On 2025-05-08 09:44:18 -0400, Bill Cole wrote: That is absolutely true but it is not *for me* a sufficient reason to remove a longstanding rule. I would need to be convinced that the

Re: rep.mailspike.net

2025-05-21 Thread Bill Cole
whether they are out of service, because > they return NXDOMAIN on the server itself. There's a RFC defining operational flags and other DNSBL best practices. See https://datatracker.ietf.org/doc/html/rfc6471#section-3.3 for specifics. I do not know of ANY DNSBLs that have an A record for the root domain of the list. It would serve no purpose in most cases. -- Bill Cole

Re: rep.mailspike.net

2025-05-21 Thread Bill Cole
t -t A rep.mailspike.net [no answer] rep.mailspike.net is not even supposed to be a nameserver. I don't see why you think it should have an A record. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: rep.mailspike.net

2025-05-21 Thread Bill Cole
n Tuesday, May 20th, 2025 at 6:57 PM, Reindl Harald (privat) wrote: [SNIP] Ignore "Harry," who has been banned from the list but continues to respond by direct mail to posters privately in his inimitable aggressively incorrect style. -- Bill Cole b...@scconsult.com or billc...@apa

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-12 Thread Bill Cole
On 2025-05-12 at 14:20:02 UTC-0400 (Mon, 12 May 2025 19:20:02 +0100) Nix is rumored to have said: > On 1 May 2025, Bill Cole told this: > >> On 2025-05-01 at 16:03:21 UTC-0400 (Thu, 01 May 2025 20:03:21 +) >> Michael Grant via users >> is rumored to have said: >

ACTION REQUIRED: Resolving the Validity situation

2025-05-12 Thread Bill Cole
utely do not want to annoy. I also realized that we didn't need to make the binary choice to include or exclude the rules, but could just do as we did with MAPS, leaving the rules extant but scored to zero so that they do not get tested. -- Bill Cole b...@scconsult.com or billc

Re: Cold emails are not considered spam?

2025-05-09 Thread Bill Cole
hey write artificial banality that is ideal for Bayesian analysis. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire signature.asc Description: OpenPGP digital signature

Re: Cold emails are not considered spam?

2025-05-09 Thread Bill Cole
address, I know that a well-trained Bayes DB will nail them pretty well too. These tools help reduce how much you actually need to do manually Of course, SpamAssassin includes all of those tools so if you have it set up properly you shouldn't have much trouble with these spammers, especia

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-08 Thread Bill Cole
On 2025-05-07 at 11:19:47 UTC-0400 (Wed, 07 May 2025 11:19:47 -0400) Greg Troxel is rumored to have said: Bill Cole writes: 1> On 2025-05-06 at 12:33:00 UTC-0400 (Tue, 06 May 2025 12:33:00 -0400) Greg Troxel is rumored to have said: [...] I think we have arrived at it being time to j

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-06 Thread Bill Cole
actually improve SA. I am much more uneasy about making changes that are entirely cosmetic. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-03 Thread Bill Cole
On 2025-05-02 at 08:39:19 UTC-0400 (Fri, 02 May 2025 08:39:19 -0400) Bill Cole is rumored to have said: > If your resolver is blocked, it is blocked everyone. Sorry: missing the word 'for' there before 'everyone'. -- Bill Cole b...@scconsult.com or billc...@apach

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-02 Thread Bill Cole
On 2025-05-02 at 07:41:46 UTC-0400 (Fri, 02 May 2025 11:41:46 +) Michael Grant via users is rumored to have said: From "Bill Cole" Did you do that in the "global" config at /etc/mail/spamassassin/local.cf (or something like it with 'etc' somewhere) or i

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-01 Thread Bill Cole
Any ideas? Thanks. My bet is on one of the issues implied above: 1. "dns_query_restriction deny bl.score.senderscore.com" is in the wrong file 2. The config line has a typo 3. Some long-lived process is retaining a stale image of the config -- Bill Cole b...@sccon

Re: disable spamhaus request

2025-04-18 Thread Bill Cole
ossible for anyone operating a resolver to accidentally leave it open. I do not KNOW whether Spamhaus actively looks for open resolvers to block. I would if I were in their place, but I'm not. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.sccon

Re: disable spamhaus request

2025-04-18 Thread Bill Cole
On 2025-04-17 at 23:30:07 UTC-0400 (Fri, 18 Apr 2025 05:30:07 +0200) Benny Pedersen via users is rumored to have said: > Andrew C Aitchison skrev den 2025-04-17 22:40: > >> I'll just repeat the words that Bill Cole sent last week >> ( https://marc.info/?l=spamassassin-user

Re: disable spamhaus request

2025-04-17 Thread Bill Cole
query_restriction is much cleaner. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-08 Thread Bill Cole
2025-04-08 at 11:51:37 UTC-0400 (Tue, 8 Apr 2025 09:51:37 -0600) Anne P. Mitchell, Esq. is rumored to have said: On Apr 8, 2025, at 9:39 AM, Reindl Harald wrote: [snip] -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com

Re: Wrong timestamp added by sendmail in Received: header?

2025-03-24 Thread Bill Cole
clue of what is > going > on here I'd be happy if he or she could give me a hint. It is out of scope for SpamAssassin, which does not trust Received headers not written by hosts in trusted_networks and NEVER modifies one. Some milters (e,g. MIMEDefang) call SA only after prepending

Re: MAILING_LIST_MULTI=-1

2025-03-14 Thread Bill Cole
r specific sites and/or senders to get a ~80% rule like MAILING_LIST_MULTI to 90%+. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Deprecated Perl support from Maxmind

2025-03-12 Thread Bill Cole
t; later deprecate MaxMind::DB::Reader instead. +1 Screwing with the namespace to make it look like an abandoned module is available and in use when it is not isn't a precedent we want to set. That way lies madness. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire signature.asc Description: OpenPGP digital signature

Re: line endings in body tests

2025-03-11 Thread Bill Cole
;rawbody' or 'full' instead. The details of those message forms are also included in the perldoc (which your system may have rendered to a man page) -- Bill Cole

Re: MAILING_LIST_MULTI

2025-02-25 Thread Bill Cole
On 2025-02-25 at 09:31:44 UTC-0500 (Tue, 25 Feb 2025 09:31:44 -0500) Greg Troxel is rumored to have said: Bill Cole writes: [...] I will look at adding an extra condition in that meta-rule. I am on multiple googlegroups. (Yes, it's a bug that anyone hosts their mailinglists

Re: MAILING_LIST_MULTI

2025-02-25 Thread Bill Cole
ago. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. It's now safe to throw off your computer. -- Bill Cole b...@scconsult.com o

Re: Blocking google IPs?

2025-02-20 Thread Bill Cole
st one IP. If that was ham that got scored as spam, maybe you should find other ways to protect it. Or maybe it will clear up tomorrow and not affect any mail that you notice for weeks. Or years. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billm

Re: bayes/txrep questions

2025-02-16 Thread Bill Cole
locklist= action ADDS the TxRep/AWL records related to a single specific email address with a high positive (spam) score without referencing any particular email message. Hopefully that clarifies... -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many

Re: Request for Whitelisting or Spam Score Adjustment for our TDL Domain

2025-02-16 Thread Bill Cole
On 2025-02-16 at 04:41:25 UTC-0500 (Sun, 16 Feb 2025 19:41:25 +1000) Noel Butler is rumored to have said: On 16/02/2025 01:07, Bill Cole wrote: On 2025-02-15 at 07:42:44 UTC-0500 (Sat, 15 Feb 2025 13:42:44 +0100) wissen.online | Stefan Mehlhorn is rumored to have said: Hi Bill, so do you

Re: Request for Whitelisting or Spam Score Adjustment for our TDL Domain

2025-02-15 Thread Bill Cole
mented for an established organization. Also, please keep all SA discussion on-list. I am unable to provide private consultation of any sort. -Ursprüngliche Nachricht- Von: Bill Cole [mailto:sausers-20150...@billmail.scconsult.com] Gesendet: Donnerstag, 13. Februar 2025 22:33

Re: bayes/txrep questions

2025-02-14 Thread Bill Cole
;t have a link at all. I have a pretty even balance of about 25k/20k ham/spam, so not sure what more can be done. Ideas greatly appreciated. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Request for Whitelisting or Spam Score Adjustment for our TDL Domain

2025-02-13 Thread Bill Cole
for "knowledge" so I would expect a lot of different computer-focused companies to use it. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Request for Whitelisting or Spam Score Adjustment for our TDL Domain

2025-02-13 Thread Bill Cole
se it helps stop fokus on tld, the important is pbl listed ip NO. You are focused on an irrelevancy. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: off topic - what about privacy compliance scanning?

2025-02-13 Thread Bill Cole
of PII and all fail as much as they work. I don't believe it is a feasible class of tools, but rather a way to extract money from people who don't really understand the problem. As such, I doubt that there are or ever will be worthwhile open source tools for this sort of scanning. N

Re: spamassassin4.x problem

2025-02-13 Thread Bill Cole
ion defined in resolv.conf says. Unless you've told SA to use some other resolver, it uses whatever the system is configured for. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Request for Whitelisting or Spam Score Adjustment for our TDL Domain

2025-02-13 Thread Bill Cole
ttps://ruleqa.spamassassin.org/20250213-r1923772-n/T_SCC_TLD_ONLINE That testing is based on the submissions of mass-scanning results by some of our users. Looking back through recent days I can find exactly 0 cases of "ham" hitting that rule. -- Bill Cole b...@scconsult.com

Re: Fake paypal email triggers -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM

2025-02-06 Thread Bill Cole
entication realm: <https://svn.apache.org:443> ASF Committers Password for 'billcole': *** Sending60_welcomelist_dkim.cf Sending60_welcomelist_spf.cf Transmitting file data ..done Committing transaction... Committed revision 1923613. -- Bill C

Re: base64 html page in headers

2025-01-24 Thread Bill Cole
CiAgICA8bWV0YSBu YW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFs LXNjYWxlPTEiPg0KICAgIDxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQogICAgICAgICNv . . . -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: USER_IN_SPF_WELCOMELIST, From: diff than Received, Amazonses.com

2025-01-20 Thread Bill Cole
(other than the ones people manage with their own mail clients.) > > -100 USER_IN_SPF_WELCOMELIST From: address is in the user's SPF > welcomelist It also may be helpful to reduce the power of that rule or to use the "default" variants of th

Re: mailspike dot net Minus 1?

2025-01-15 Thread Bill Cole
so I can't even be sure that they make sense for me today, but they certainly are not causing visible trouble, -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Strategy for collecting spam to feed Bayes?

2025-01-13 Thread Bill Cole
additional copies for real users get rejected no matter which path they arrive by. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Strategy for collecting spam to feed Bayes?

2025-01-13 Thread Bill Cole
e, not the encapsulation message. In principle SA should be able to unwrap its own reports, but there are gaps there. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: SA 4.0.1 Bayes in SQL: MYSQL_OPT_RECONNECT is deprecated

2025-01-10 Thread Bill Cole
ersions, so it is a good idea to update that module. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: KAM rule __GB_CUSTOM_SURGESH fails lint check

2025-01-04 Thread Bill Cole
ed Capture Groups" feature of SpamAssassin v4.x, so if you are using an older version, you get that error. Generally, these sorts of cases are handled by wrapping rules that demand new features in version-checking protection. I expect that this will get such a fix shortly. -- Bill Cole b

Re: Where to report bugs about sa-learn ?

2024-12-28 Thread Bill Cole
when dealing with (imap) compressed files for which I've found > a workaround, and would like to report both. > > Should I file a bug in bugzilla or what ? Yes. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: opt-out spam

2024-12-22 Thread Bill Cole
try to catch similar phrases, although I don't recall its name off the top of my head. -- Bill Cole

Re: PhishStats feed is dead?

2024-12-15 Thread Bill Cole
provide. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Patch to improve detection of offering SEO spam

2024-12-14 Thread Bill Cole
On 2024-12-14 at 15:20:41 UTC-0500 (Sat, 14 Dec 2024 12:20:41 -0800 (PST)) John Hardin is rumored to have said: On Sat, 14 Dec 2024, Bill Cole wrote: On 2024-12-13 at 06:53:59 UTC-0500 (Fri, 13 Dec 2024 12:53:59 +0100) Kirill A. Korinsky is rumored to have said: Dear SA users, I&#

Re: Patch to improve detection of offering SEO spam

2024-12-14 Thread Bill Cole
box of Paul Stead, it is prudent and courteous to get his input on this. I hope he is still reading this list. An example of that spam email: https://pbot.rmdir.de/xbuEKl2kxv7AmPBRYzRU-g -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *

Re: userprefs for 4.0?

2024-12-12 Thread Bill Cole
SA distribution. This is for v3. I'd like to make sure I'm implementing it properly for welcomelist and any other v4 changes from v3. There's nothing in that schema that depends on the names of preferences. It is exceedingly simple. -- Bill Cole b...@scconsult.com or billc...@

Re: Confused by SpamAssassin Hit on SPF_NONE

2024-12-06 Thread Bill Cole
: wrangell.leepfrog.com; dmarc=pass (p=reject dis=none) header.from=godaddy.com Authentication-Results: wrangell.leepfrog.com; spf=pass smtp.mailfrom=godaddy.com DKIM-Filter: OpenDKIM Filter v2.11.0 wrangell.leepfrog.com D457E634CDB6 Authentication-Results: wrangell.leepfrog.com; dkim=none -- B

Re: [External] Paypal phishing?

2024-11-21 Thread Bill Cole
...anyone have a tidy way for me to "fix" this perl issue??? I think those are just warnings, but it *may* indicate that you need to reinstall File::Spec::Unix, which is part of the PathTools distribution. Thanks again On 11/21/2024 11:23 AM, Bill Cole wrote: On 2024-11-21 at 10

Re: [External] Paypal phishing?

2024-11-21 Thread Bill Cole
1/2024 7:57 AM, AJ Weber wrote: >>> I saw a "conversation" a few weeks ago regarding paypal phishing emails >>> that were not being caught. >>> >>> I can't recall if anyone found a reasonable solution (or new rules). >>> >>> I just received one and it seems very well crafted.  Is anyone still >>> collecting samples and wants this one too? >>> >>> Thanks for any recap anyone can provide. >> -- Bill Cole

Re: All RCVD_IN_VALIDITY rules being applied to every email.

2024-11-18 Thread Bill Cole
are trying to create that blockfile in that directory. The point of the big ugly error message is to have a big ugly error message. MOST people who report problems with SA accuracy here have misconfigured their resolvers, apparently because they don't trust documentation or don't read it. -- Bill Cole

Re: A lot of "invalid DKIM result" messages in my logs

2024-11-16 Thread Bill Cole
ying cause, it is entirely harmless. You may want to verify that legitimate messages are matching DKIM and DMARC SpamAssassin rules to be sure. It is possible that this is actually a bug in Mail::DMARC. The lack of a DKIM value in an A-R header probably should not generate a warning. -- B

Re: Bayes in V4 compared to V3

2024-11-12 Thread Bill Cole
rage module. It's compatible with SQLite and possibly other standard SQL servers. Do not use this for MySQL/MariaDB or PgSQL, they have their own specific modules. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: paypal fraud

2024-11-07 Thread Bill Cole
ng any sort of blocklist which requires active close attention. We can't do that competently. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

HEADS UP: Masscheck submissions broken?

2024-10-31 Thread Bill Cole
ally change a great deal from one day to the next. Anyone submitting masscheck results who can share a sender-side view of whatever is going on is urged to do so. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) No

Re: Comment on lint behavior

2024-10-30 Thread Bill Cole
ning in the context of an email address. See page 12 of RFC5322, where ^ is explicitly included in the definition of legal characters in an email address. -- Bill Cole

Re: Multiple SpamAssassins: how many X-Spam-Status header fields?

2024-10-25 Thread Bill Cole
deprecated for years, it still is a strong sign that the header is NOT well-specified and could change in meaning over time. There are no "rules" about X-* headers except that devising new ones is a bad idea. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: training bayes and newsletters

2024-10-16 Thread Bill Cole
27;t there be enough? Absolutely. But the Bayes classifier can't classify mail of types that have been meticulously excluded from its training corpus. Would I benefit from training known trustworthy newsletters such as ham? Yes. And train the spam ones as spam. -- Bill Cole b...@scconsu

Re: no external relay found, skipping DMARC check

2024-10-14 Thread Bill Cole
RC check? Configure SpamAssassin properly and let it examine non-local mail. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: blocking compute-1.amazonaws.com

2024-10-11 Thread Bill Cole
network space (generally with names like that) blocked in various ways, and have never had a reason to make an exception. At one point in the past, Spamhaus did so as well, although I'm not sure if that remains true. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grump

Re: Whitelist or BAYES?

2024-10-01 Thread Bill Cole
ble ones, but they don't result in many false positive *final scores* for most people. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: ATTENTION: DNSWL to be disabled by default.

2024-09-24 Thread Bill Cole
icted open DNS > server that returns to the client, in response to a query, the IP address of > the DNS host from where the query originated.  Sort of like the old, > never-used, TCP Echo service. > > Of course, the devil is in the details.  But I like your thinking Matus :)  > My mind is about as sharp as a cooked linguine noodle. I'm sure there are a > lot of people out there that can conjure up better solutions. As I said in a previous message: patches are welcomed. -- Bill Cole

Apology (was Re: ATTENTION: DNSWL to be disabled by default.)

2024-09-24 Thread Bill Cole
On 2024-09-24 at 09:13:16 UTC-0400 (Tue, 24 Sep 2024 09:13:16 -0400) Bill Cole is rumored to have said: > On 2024-09-24 at 04:18:06 UTC-0400 (Tue, 24 Sep 2024 10:18:06 +0200) > Matthias Leisi > is rumored to have said: > (Quoting me) >>> >>> people who don'

Re: ATTENTION: DNSWL to be disabled by default.

2024-09-24 Thread Bill Cole
obvious error. > > Tom > > On Tue, Sep 24, 2024 at 10:16 AM Peter Ajamian > wrote: > >> On 24/09/24 05:02, Bill Cole wrote: >>> Note >>> that as of 2024-03-01 (as documented at the DNSWL link above) they have >>> reduced the free limit to 10

Re: ATTENTION: DNSWL to be disabled by default.

2024-09-24 Thread Bill Cole
stently go above the >>> limits, sometimes for months and years after receiving the blocked response. > > On 24.09.24 09:13, Bill Cole wrote: >> I don't see how that's significant. The documented policy is directly and >> intentionally harmful to users. > >

Re: ATTENTION: DNSWL to be disabled by default.

2024-09-24 Thread Bill Cole
functioning MTA to accept external mail, SA strives to NOT enable dangerous 3rd-party tools by default. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: ATTENTION: DNSWL to be disabled by default.

2024-09-23 Thread Bill Cole
s. This is partly because we are considerate of the fact that we have users who build on top of the mostly-stable default rules. It is also because we are all volunteers, with lives and jobs that generally take priority over making SA better. Regards,G ____ From:

ATTENTION: DNSWL to be disabled by default.

2024-09-23 Thread Bill Cole
you want to use DNSWL is very much a local choice. At 10k queries/month, MOST sites will need to either register (and likely pay DNSWL) or leave the rules disabled. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses

Re: Disable validity rules

2024-09-23 Thread Bill Cole
://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. Thanks! -- Bill Cole b

Re: Tips on training bayes?

2024-09-19 Thread Bill Cole
scored rules and sub-rules and multiple shared reputation tests. A single test (such as Bayes) being wrong is not a flaw, it is an inescapable attribute of SA's design. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Use of uninitialized value $response[0]

2024-09-17 Thread Bill Cole
ndicates that you are running an obsolete 3.4.x version. The likely root cause there is the lack of any reply from the Pyzor server, which is unlikely to be a per-user condition. -- Bill Cole

Noise Around This List (was Re: Bayes in V4 compared to V3)

2024-09-13 Thread Bill Cole
On 2024-09-13 at 09:13:58 UTC-0400 (Fri, 13 Sep 2024 15:13:58 +0200) Benny Pedersen is rumored to have said: Bill Cole skrev den 2024-09-13 15:03: Please send any replies to the list only. unsubscribe listarchivers ? and make archived on apache.org with bugzilla login don't know

Re: Bayes in V4 compared to V3

2024-09-13 Thread Bill Cole
9-13 at 05:00:17 UTC-0400 (Fri, 13 Sep 2024 09:00:17 +) Grega is rumored to have said: Do you have V3 or V4 SA? From: Reindl Harald (privat) Sent: Friday, 13 September 2024 10:57 To: Grega; Bill Cole; Grega via users Subject: Re: Bayes in V4 compared to V3

Re: Bayes in V4 compared to V3

2024-09-12 Thread Bill Cole
d lack adequate ham and spam counts, you get no BAYES hits. Also, if you have any rules set to "shortcircuit" they can cause SA to stop checking before Bayes is done. I *think* I've also seen Bayes skip on excess load, with too much lock contention on a file-based mechanism like

Re: M365 phish with USER_IN_DKIM_WHITELIST

2024-08-30 Thread Bill Cole
lives and of history. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: QR phish missed

2024-08-16 Thread Bill Cole
itten by systems you don't control or have some sort of explicit relaying arrangement with. Because the initial submission of messages CANNOT be subjected to SPF tests, you don't want to test transactions that are not following an MX record. -- Bill Cole b...@scconsult.com or bill

Re: Blocking Malformed "From" Headers

2024-07-18 Thread Bill Cole
reject it entirely. Thanks, Kirk Remove FEATURE(always_add_domain) from your .mc and remake sendmail.cf. Consult the Ops guide and/or cf/README for all of the effects of that. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: X-Amavis-Alert: BANNED, message contains x.com

2024-07-16 Thread Bill Cole
? ask on amavis maillist are spamassassin using extractext ? asking to be sure That is NOT a SpamAssassin message, as SA does nothing so silly. It is clearly and strictly an Amavis issue. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many

Re: Requesting help, sa-update, cron, gpg, unsafe ownership on homedir

2024-07-12 Thread Bill Cole
those keys belong to someone else. I cannot recall now, why I set owner to spamd. maybe spamd could not read the gpg keys when trying an update before? Why would a program run as root need that? -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@bi

Re: whitelist_auth return_path / from

2024-07-03 Thread Bill Cole
, Simon, quote the text you are replying to.   I have been - was that directed at Benny?   No, it is because your mail is multipart/alternative with a text/plain part that lacks any indicators of quoting. Looks like your MUA is broken. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA

Re: ChatGPT > Spamassassin? :)

2024-06-25 Thread Bill Cole
m for feeding FPs into both a sitewide Bayes DB and into the AWL/TxRep DB by using the blocklist/welcomelist options of the spamassassin script. On 6/25/2024 11:21 AM, Bill Cole wrote: Mark London is rumored to have said: I received a spam email with the text below, that wasn't

Re: ChatGPT > Spamassassin? :)

2024-06-25 Thread Bill Cole
o way to remove any particular ingested data. There's no way to know where any particular LLM will have problems and no way to fix those problems. This all puts them outside of the boundaries we have as an ASF project. However, we do have a plugin architecture, so it is possible for 3rd parties

Re: Questions about spamassassin

2024-06-21 Thread Bill Cole
Message-ID > bayes_ignore_header Resent-Subject > bayes_ignore_header Resent-To > > I think that first line looks problematic. I agree. The spurious # would generate precisely the error message you got. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.soci

Re: Questions about spamassassin

2024-06-20 Thread Bill Cole
do with permissions or ownership. There's an error in local.cf. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Docs confusion and missing dependency on EL9

2024-06-19 Thread Bill Cole
age should have a link for INSTALL like it already has for the Upgrade. And I would say "Where to download" and "How to install" are pretty common FAQs, too. Indeed. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: BayesStore MariaDB on EL9

2024-06-18 Thread Bill Cole
nt(11) NOT NULL DEFAULT 0,   `atime` int(11) NOT NULL DEFAULT 0,   PRIMARY KEY (`id`,`token`),   KEY `bayes_token_idx1` (`id`,`atime`) ) ENGINE=InnoDB DEFAULT CHARSET=latin1 COLLATE=latin1_swedish_ci 1 row in set (0.000 sec) Any idea what goes wrong here? Thanks, Gerald -- Bill Cole

Re: Where are your test definitions?

2024-06-14 Thread Bill Cole
ell checks in another. However, I can see in the journal that every mail is checked against blocklists, may be not completly? This difference is now irritating me. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Where are your test definitions?

2024-06-14 Thread Bill Cole
through the current files in the repo: https://svn.apache.org/viewvc/spamassassin/trunk/rules/ and https://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/ -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses

Re: Warning: Your Pyzor may be broken.

2024-06-08 Thread Bill Cole
On 2024-06-08 at 15:35:01 UTC-0400 (Sat, 08 Jun 2024 21:35:01 +0200) Benny Pedersen is rumored to have said: > Bill Cole skrev den 2024-06-08 20:45: > >> I've chosen #3 for myself, but it's not great. > > is why cpanel provided a perl pyzor client ? I had forgotten

Warning: Your Pyzor may be broken.

2024-06-08 Thread Bill Cole
k with Python 3. 3. Install the head of the development tree from GitHub, whatever that happens to be at the moment. I've chosen #3 for myself, but it's not great. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: [mailop] SORBS Closing.

2024-06-07 Thread Bill Cole
amasssassin.org rules channel earlier this week. Scanning the latest deployed (by sa-update) version r1918114 I see no surviving references to SORBS. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: RCVD_IN_RP_CERTIFIED always -3

2024-06-07 Thread Bill Cole
iently. This is especially true if you use rulesets from that era, which have known (and fixed in trunk) runaway problems and obsolete DNSBL configs. There may also be a problem running sa-update from 3.4.4 because we have abandoned SHA1 signatures. I'm not sure if 3.4.4 included the changes

Re: DKIM length 'l=' tag

2024-06-03 Thread Bill Cole
BIMI should be broken now and with every opportunity available. It is an indicator that a MUA author puts the interests of marketers ahead of the interests of users. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Lots of FN because of VALIDITY* rules

2024-06-03 Thread Bill Cole
It is irrelevant to an operational deployment. I have no idea why Debian installs that file at all. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Lots of FN because of VALIDITY* rules

2024-06-03 Thread Bill Cole
SA updates include the active rules list in the form of the 72.active.cf file. The active.list file is not part of normal operations. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: TxRep does not read setting|default value

2024-05-30 Thread Bill Cole
On 2024-05-30 at 03:58:18 UTC-0400 (Thu, 30 May 2024 16:58:18 +0900) Tomohiro Hosaka is rumored to have said: > Hello. > > The code seems to be wrong. I do not believe that to be so. See lines 340-347 in TxRep.pm. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @g

Re: "deadline shrunk" in logs ?

2024-05-27 Thread Bill Cole
l pending DNS queries were complete and before the fixed timeout deadline was reached. The most common cause is a DNS-based rule configured to shortcircuit while other queries are outstanding. -- Bill Cole

Re: Extract Local-part from To: Adress to use in spamassassin rule

2024-05-23 Thread Bill Cole
in one rule and use it in another. I don't have a working rule for you, but that's the mechanism I would use. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: double backslash in the log messages

2024-05-21 Thread Bill Cole
have all common meta-characters escaped. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

Re: Difference between spamc -L and sa-learn

2024-05-18 Thread Bill Cole
expensive to execute perl and have it load the many SpamAssassin modules needed to learn a message. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com addresses) Not Currently Available For Hire

  1   2   3   4   5   6   7   8   9   10   >