Re: non-free Services

2024-09-18 Thread Philipp Ewald
Laurent S.: On 18.09.24 11:37, Philipp Ewald wrote: Hello,, im searching for all non-free comercial services in Spamassasin. ATM i found: dns_query_restriction deny sorbs.net dns_query_restriction deny bl.mailspike.net dns_query_restriction deny wl.mailspike.net Spamcop (ZEN) Does i need to disable

Re: non-free Services

2024-09-18 Thread Philipp Ewald
OK, thank for that input. Am 18.09.24 um 11:46 schrieb Marc: im searching for all non-free comercial services in Spamassasin. ATM i found: dns_query_restriction deny sorbs.net dns_query_restriction deny bl.mailspike.net dns_query_restriction deny wl.mailspike.net Spamcop (ZEN) Does i need to

non-free Services

2024-09-18 Thread Philipp Ewald
Hello,, im searching for all non-free comercial services in Spamassasin. ATM i found: dns_query_restriction deny sorbs.net dns_query_restriction deny bl.mailspike.net dns_query_restriction deny wl.mailspike.net Spamcop (ZEN) Does i need to disable other services as well? cant find any official

Re: What is RP? many false negatives and dont respond to emails

2024-08-13 Thread Philipp Ewald
Thanks, it was on hold. I will upgrade it. On 13.08.24 13:17, Axb wrote: On 8/13/24 11:37, Philipp Ewald wrote: User getting Spams with Score -5 because of this... other experiences? does they answer e-mails? mine got not in weeks RCVD_IN_RP_CERTIFIED=-3, RCVD_IN_RP_RNBL=1.31

What is RP? many false negatives and dont respond to emails

2024-08-13 Thread Philipp Ewald
User getting Spams with Score -5 because of this... other experiences? does they answer e-mails? mine got not in weeks RCVD_IN_RP_CERTIFIED=-3, RCVD_IN_RP_RNBL=1.31, RCVD_IN_RP_SAFE=-2] many thanks -- Philipp Ewald

getting waring from spamassassin.apache.org

2022-07-13 Thread Philipp Ewald
Yesterdax i got a waring, because of a bounced massage. Is this normal thats this Waring was from 2021? Subject: NOTICE: mail delivery status. Date: Tue, 27 Jul 2021 16:46:43 +0200 -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln E-Mail: philipp.ew

Re: MIME_BASE64_TEXT only on us-ascii

2021-11-17 Thread Philipp Ewald
AM, Philipp Ewald wrote: We support utf-8 Mails and we got Mails utf-8 base64 coded. This should be a reason too to set spam rating. Sorry i dont get it. have a nice day. The point is this: UTF-8 emails SHOULD be base64 encoded. ASCII emails SHOULD NOT be base64 encoded. Therefore, an ASCII

Re: MIME_BASE64_TEXT only on us-ascii

2021-11-16 Thread Philipp Ewald
We support utf-8 Mails and we got Mails utf-8 base64 coded. This should be a reason too to set spam rating. Sorry i dont get it. have a nice day. On 11/16/21 1:00 PM, Reindl Harald wrote: Am 16.11.21 um 12:47 schrieb Philipp Ewald: Why should a uft-8 base64 coded Mail should contain

Re: MIME_BASE64_TEXT only on us-ascii

2021-11-16 Thread Philipp Ewald
. Containing the same content I can understand the point of this rule, but IMO this rule has Bug and should be redesigned On 11/16/21 12:15 PM, Martin Gregorie wrote: On Tue, 2021-11-16 at 11:32 +0100, Philipp Ewald wrote: This is correct. But why is us-ascii requeired for this rule? Are spammer

Re: MIME_BASE64_TEXT only on us-ascii

2021-11-16 Thread Philipp Ewald
uot;utf-8" Kind regards On 11/16/21 4:28 AM, Bill Cole wrote: I have no clue what to test. I do not understand what you think is not working as intended. -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Fax: +49 221 6500-690, E-Mail: philipp.ew...@digion

Re: MIME_BASE64_TEXT only on us-ascii

2021-11-15 Thread Philipp Ewald
ate with site: https://www.base64encode.org/ Kind regards On 11/12/21 10:16 PM, Bill Cole wrote: On 2021-11-12 at 04:33:34 UTC-0500 (Fri, 12 Nov 2021 10:33:34 +0100) Philipp Ewald is rumored to have said: Hi folks, it's seems to be that spamassins dont check non ASCII Base64 decodes Ma

MIME_BASE64_TEXT only on us-ascii

2021-11-12 Thread Philipp Ewald
CESSIVE_ESCAPES=1.572, KHOP_DYNAMIC=0.001, MIME_BASE64_TEXT=1.741, MIME_HTML_ONLY=0.723, RAZOR2_CF_RANGE_51_100=1.886, RAZOR2_CHECK=0.922, RCVD_IN_RP_RNBL=1.31, T_REMOTE_IMAGE=0.01] Is this a Bug? Kind regards Philipp -- Philipp Ewald Administrator DigiOnline GmbH, Probste

Re: Fw: spam from gmail.com

2021-11-11 Thread Philipp Ewald
lth after my death.Please,i need your urgent reply so that i can tell you more on how you will handle my wish before i die.I will be waiting to hear from you immediately by God grace amen, yours sincerely. Mrs.Marann Silvia -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 5

Re: What does that rule mean "SUBJ_OBFU_PUNCT FEW"

2021-01-13 Thread Philipp Ewald
No the Support said "Yes your listed because your "no-reply@" his hitting the following rules..." nothing *else* On 1/13/21 6:07 PM, John Hardin wrote: The scores on those rules are rather low - they are not "poison pills". What *else* are those mai

Re: What does that rule mean "SUBJ_OBFU_PUNCT FEW"

2021-01-13 Thread Philipp Ewald
o-8859-1 Content-Transfer-Encoding: 7bit X-Mime-Autoconverted: from 8bit to 7bit by courier 1.0 On 1/13/21 5:02 PM, Antony Stone wrote: On Wednesday 13 January 2021 at 16:57:55, Philipp Ewald wrote: Hello, we try to deliver mails to GMX/WEB but we got frequency blocked because "ro-reply@

What does that rule mean "SUBJ_OBFU_PUNCT FEW"

2021-01-13 Thread Philipp Ewald
good declaration for this rules.. can some one explain please? (easy as possible) Does that has todo with ".", ";", ":" in Headers? many thank! kind regards Philipp -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Fax: +49 221 650

Re: contact from blacklist

2020-11-21 Thread Philipp Ewald
it looks to me like abuse of a web-based feedback form - post a spammy feedback using the email address of your victim and you spam the victim via the confirmation (and the domain hosting the feedback form at the same time). -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19,

Re: contact from blacklist

2020-11-20 Thread Philipp Ewald
we have a higher usage On 11/20/20 7:05 PM, Benny Pedersen wrote: Philipp Ewald skrev den 2020-11-20 18:52: X-Spam-Flag: NO X-Spam-Score: 1.526 X-Spam-Level: + X-Spam-Status: No, score=1.526 tagged_above=- required=5 tests=[BAYES_50=0.8, HTML_FONT_LOW_CONTRAST=0.001, HTML_MES

Re: contact from blacklist

2020-11-20 Thread Philipp Ewald
BLABLALBA Your Text to us: SPAM or is this only a german problem? Kind regards Philipp -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Fax: +49 221 6500-690, E-Mail: philipp.ew...@digionline.de AG Köln HRB 27711, St.-Nr. 5215 5811 0640 Geschäft

contact from blacklist

2020-11-20 Thread Philipp Ewald
Hi everyone, lately I get more and more spam from so called contact forms. Does anyone know a blacklist for this? Kind regards Philipp -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Fax: +49 221 6500-690, E-Mail: philipp.ew...@digionline.de AG Köln HRB

Re: Check HELO

2020-09-14 Thread Philipp Ewald
- fantomas: On 14.09.20 14:35, Philipp Ewald wrote: we have one customer the reported problems about HELO.  We send the RFC821 HELO for only DOMAIN not FQDN. The customer scanning the helo and check the PTR and if the PTR don't match the HELO there is SPAM rating. this is forbidden by any SMTP

Check HELO

2020-09-14 Thread Philipp Ewald
too. Does anyone else checks the HELO/ELHO? Kind Regards Philipp -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln E-Mail: philipp.ew...@digionline.de AG Köln HRB 27711, St.-Nr. 5215 5811 0640 Geschäftsführer: Werner Grafenhain Informationen zum D

Re: A new high score!

2020-08-25 Thread Philipp Ewald
oints. I'm sure you all have seen much higher! -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Telefon: +49 221 6500-532, Fax: +49 221 6500-690, E-Mail: philipp.ew...@digionline.de AG Köln HRB 27711, St.-Nr. 5215 5811 0640 Geschäftsführer: Werner

Re: IMPORTANT NOTICE: Rules referencing WHITELIST or BLACKLIST in process of being Renamed

2020-07-20 Thread Philipp Ewald
ences to USER_IN_WELCOMELIST_TO. In order to remove racially charged configuration options, whitelist will become welcomelist and blacklist will become blocklist.  More changes will be coming for this with these small changes in the stock ruleset. Apologies for the disruption and thanks to

Re: IMPORTANT NOTICE: Rules referencing WHITELIST or BLACKLIST in process of being Renamed

2020-07-20 Thread Philipp Ewald
ing for this with these small changes in the stock ruleset. Apologies for the disruption and thanks to those who are reporting issues as we work through the changes. Regards, KAM -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Telefon: +49 221 6500-532, Fa

Re: spamhaus enabled by default

2020-07-10 Thread Philipp Ewald
t (already included in SpamAssassin): https://www.spamhaus.org/news/article/788/spamhaus-dnsbl-return-codes-technical-update -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Telefon: +49 221 6500-532, Fax: +49 221 6500-690, E-Mail: philipp.ew...@digionline.de AG Köln

Re: spamhaus enabled by default

2020-07-10 Thread Philipp Ewald
mmercial or not... AFIK you got problem if your running spamhaus and have no license so any mail got marked as SPAM (or got hit SMAPMHAUS rule on any domain?) Am 10.07.20 um 13:43 schrieb Axb: On 7/10/20 1:40 PM, Philipp Ewald wrote: in local.cf  add: dns_query_restriction deny spamhaus.org that

Re: spamhaus enabled by default

2020-07-10 Thread Philipp Ewald
in local.cf add: dns_query_restriction deny spamhaus.org that should fix the problem and survive SA updates Many Thank! now it's work. but why is this enabled by default? Am 10.07.20 um 13:23 schrieb Axb: On 7/10/20 1:20 PM, Philipp Ewald wrote: Hey everyone, we got a nice mail

spamhaus enabled by default

2020-07-10 Thread Philipp Ewald
share/spamassassin but after update the configuration comes back. How do i disable them right? and why got this behavior changed? kind regard Philipp Ewald -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln AG Köln HRB 27711, St.-Nr. 5215 5811 0640 Geschäftsführer: W

Re: [SPAM] Re: REPLYTO_WITHOUT_TO_CC

2020-02-05 Thread Philipp Ewald
and enabling security updates, so security updates are installed automatically. -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Telefon: +49 221 6500-532, Fax: +49 221 6500-690, E-Mail: philipp.ew...@digionline.de AG Köln HRB 27711, St.-Nr. 5215 5811 0640 Geschä

Re: [SPAM] Re: REPLYTO_WITHOUT_TO_CC

2020-02-05 Thread Philipp Ewald
ebase is this; linux-distribution package, CPAN, other? Feb  5 14:19:46.438 [6998] warn:  (Global symbol "$Blat" requires explicit package name (did you forget to declare "my $Blat"?) at /etc/spamassassin/70_zmi_german.cf, rule __ZMIfish_ForgedBill01, line 1.) [1] http://zmi.a

Re: [SPAM] Re: REPLYTO_WITHOUT_TO_CC

2020-02-05 Thread Philipp Ewald
Am 05.02.20 um 14:22 schrieb Philipp Ewald: Sure. spamassassin -V SpamAssassin version 3.4.2   running on Perl version 5.24.1 pts rule name  description -- --  3.5 BAYES_99   BODY: Bayes spam prob

REPLYTO_WITHOUT_TO_CC

2020-02-05 Thread Philipp Ewald
or this one the rule name should be description enough: there is a Reply-To: header but not a To: or Cc: header. is this an error/bug or do is miss something? Kind regards Philipp -- Philipp Ewald Administrator

Re: Bitcoin ransom mail

2019-12-19 Thread Philipp Ewald
not include headers so I don't know what scored. It must have hit a rule for a message with no text and an image. There isn't much else there. -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Telefon: +49 221 6500-532, Fax: +49 221 6500-690, E-Mail: ph

bayes_auto_learn_on_error

2019-12-04 Thread Philipp Ewald
! kind regards Philipp -- Philipp Ewald Administrator DigiOnline GmbH, Probsteigasse 15 - 19, 50670 Köln Telefon: +49 221 6500-532, Fax: +49 221 6500-690, E-Mail: philipp.ew...@digionline.de AG Köln HRB 27711, St.-Nr. 5215 5811 0640 Geschäftsführer: Werner Grafenhain Informationen zum Datenschutz: www.digionline.de/ds

Re: shortcircuit on alread x-spam-flag: yes

2019-11-28 Thread Philipp Ewald
score=98.7 tagged_above=- required=5 tests=[RCVD_IN_DNSWL_MED=-2.3, SHORTCIRCUIT=100, SpamFlag=1] autolearn=disabled i set this priority lower then DNSWL so save some network traffic kind regards Philipp Am 27.11.19 um 18:30 schrieb Benny Pedersen: On 2019-11-27 17:56, Philipp Ewald w

Re: shortcircuit on alread x-spam-flag: yes

2019-11-27 Thread Philipp Ewald
f yes then why using a spamassassin rule and not straight-out reject such mails on mta (header check)? And if you do not trust the remote server then why using its spam decission at all? Cheers tobi Am 26.11.19 um 14:06 schrieb Philipp Ewald: Hi guys, i want to bypas scanning mail if mail has alre

Re: shortcircuit on alread x-spam-flag: yes

2019-11-26 Thread Philipp Ewald
Am 26.11.19 um 15:43 schrieb Matus UHLAR - fantomas: On 26.11.19 15:08, Philipp Ewald wrote: Not really... or why should some one set this header on non-spam? FP means false positive. Mail that was evaluated as spam but is not. i know ;-) X-Spam-Flag: yes on non spam is false positiv

Re: shortcircuit on alread x-spam-flag: yes

2019-11-26 Thread Philipp Ewald
Am 26.11.19 um 15:28 schrieb Reindl Harald: Am 26.11.19 um 15:08 schrieb Philipp Ewald: Not really... or why should some one set this header on non-spam? strange question why should anybody forard a mail instead reject it when it's 100% spam? we have "old customer" (

Re: shortcircuit on alread x-spam-flag: yes

2019-11-26 Thread Philipp Ewald
Not really... or why should some one set this header on non-spam? Am 26.11.19 um 14:44 schrieb Matus UHLAR - fantomas: On 26.11.19 14:06, Philipp Ewald wrote: i want to bypas scanning mail if mail has already X-Spam-Flag: YES set. I found "clear_headers" in "/usr/sha

shortcircuit on alread x-spam-flag: yes

2019-11-26 Thread Philipp Ewald
Hi guys, i want to bypas scanning mail if mail has already X-Spam-Flag: YES set. I found "clear_headers" in "/usr/share/spamassassin/10_default_prefs.cf". how can i override this setting? (include next update) Kind regards Philipp -- Philipp Ewald Administra

some question about bayes learn/score math

2019-11-22 Thread Philipp Ewald
f? i can't find anything else... PS: I have already read the following http://www.paulgraham.com/naivebayes.html(like spamassassin say it use bayes like this) http://www.paulgraham.com/spam.html https://cwiki.apache.org Kind regards -- Philipp Ewald Administrator

Autolearn HAM with spamscore 996

2019-10-22 Thread Philipp Ewald
27; => 999], )); did i miss something? can someone help me? google "auto learn amavis spamassassin" its really tricky to find something helpful. kind regards Philipp On 22.10.19 15:56, RW wrote: Train on the actual email. -- Philipp Ewald Administrator

Question about Bayes implementation

2019-10-22 Thread Philipp Ewald
learn with whole mail or can i split them and learn only plain/text part? ore wich part would be "the best" to learn? thanks for help kind regards -- Philipp Ewald Administrator