Re: Log reporting spamd[11912]: dns: [...] messages

2022-05-30 Thread DL Neil
On 30/05/2022 03.06, Bill Cole wrote: > On 2022-05-28 at 19:25:46 UTC-0400 (Sun, 29 May 2022 11:25:46 +1200) > DL Neil > is rumored to have said: No, he said it. >> SpamAssassin x86_64 3.4.0 CentOS 6.el7 release >> Postfix 2.10.1 >> unbound 1.6.6 > > Obsolet

Log reporting spamd[11912]: dns: [...] messages

2022-05-28 Thread DL Neil
SpamAssassin x86_64 3.4.0 CentOS 6.el7 release Postfix 2.10.1 unbound 1.6.6 Expanded defences to include dnswl. Recommendation to install local dns caching server followed. Once installed, large numbers of messages started to appear in maillog. Intended to only access the one white-list service.

Re: AuthCourier.pm

2020-06-22 Thread Neil Romig
On Sat, 2020-06-20 at 12:23 -0400, Bill Cole wrote: > On 20 Jun 2020, at 4:14, Neil Romig wrote: > > > Does anyone know the status of AuthCourier.pm in Spamassassin? > > It *NEVER* has been in any way an official part of the SpamAssassin > project. I can find no evidenc

AuthCourier.pm

2020-06-20 Thread Neil Romig
using. I don't want to experiment any more than necessary on my mail server so perhaps someone can confirm whether I need this module for my virtual mail users. Neil.

Re: SPAM from a registrar

2014-05-23 Thread Neil Schwartzman
that’s nice, but useless unless you also take into account the size of the registrar, IOW the number of domains they registered in the same period. Neil Schwartzman Executive Director Coalition Against Unsolicited Commercial Email http://cauce.org Tel : (303) 800-6345 Twitter : @cauce On

Some changes at the AHBL

2014-03-29 Thread Neil Schwartzman
Begin forwarded message: > From: Brielle Bruns > Subject: [SDLU List] Some changes at the AHBL > Date: March 26, 2014 at 11:59:13 AM EDT > > Hey All, > > So, this has been a long time coming, but figured I'd make the announcement. > > I'm winding down the public DNSbl services of the AHBL.

Re: bit.ly and Spamhaus DBL

2014-03-05 Thread Neil Schwartzman
On Mar 5, 2014, at 10:40 PM, Neil Schwartzman wrote: > Yeah. An abused, and abusive redirector. They only deal with abuse > Monday-Friday, 9:00-17:00.* They never break links, but put an interstitial > in between the victim and the payload. Gee thanks. BTW spamhaus aren’t the only

Re: bit.ly and Spamhaus DBL

2014-03-05 Thread Neil Schwartzman
On Mar 5, 2014, at 9:38 PM, RW wrote: > On Wed, 05 Mar 2014 08:18:39 -0500 > Joe Quinn wrote: > > >> By the way, I recommend you inform Spamhaus of the FP on bitly. > > It's not an FP, Spamhaus lists it as a redirector, which it is. As has > already been pointed-out it scores 0.001 in SA. Yea

Re: Who wants to trade data?

2014-02-07 Thread Neil Schwartzman
On Feb 7, 2014, at 6:08 AM, Benny Pedersen wrote: > On 2014-02-07 01:33, Noel Butler wrote: >> else we'd have seen a url in one of his posts >> advertising it, therefore can be considered UCE > > agree if its free to download its not spam, i just think its the grey zone > here Sorry, no. The

Re: Detecting very recently registered domain names

2014-01-09 Thread Neil Schwartzman
her types of abuse among registrants. Neil Schwartzman Executive Director Coalition Against Unsolicited Commercial Email http://cauce.org Tel : (303) 800-6345 Twitter : @cauce

Re: Detecting very recently registered domain names

2014-01-06 Thread Neil Schwartzman
her types of abuse among registrants. Neil Schwartzman Executive Director Coalition Against Unsolicited Commercial Email http://cauce.org Tel : (303) 800-6345 Twitter : @cauce

Re: Offtopic: SpamCop refuses to receive reports

2013-11-12 Thread Neil Schwartzman
.7.1 Your access to submit messages to > this e-mail system has been rejected. > Nov 12 19:52:14 wellington report[1601]: reporter: could not report spam > to SpamCop > > Has something changed in their policy or what has happened? > > Any ideas? > > -- > jarif.bit >

Re: Wishing You Happy New Year !

2013-11-02 Thread Neil Schwartzman
mentioned in the youtube video Neil Schwartzman Executive Director Coalition Against unsolicited Commercial Email Tel :(303) 800-6345 Mob: (415) 361-0069 @cauce

Re: Outbound filtering (was Re: How to get removed from spamcop?)

2013-10-29 Thread Neil Schwartzman
On Oct 29, 2013, at 9:31 AM, David F. Skoll wrote: > On Mon, 28 Oct 2013 21:42:29 -0400 (EDT) > "John R. Levine" wrote: > >> But outbound filtering is far more useful when it, you know, actually >> works. > > Outbound filtering is far trickier than inbound filtering. Unless you > really want

Re: How to get removed from spamcop?

2013-10-29 Thread Neil Schwartzman
On Oct 29, 2013, at 9:19 AM, Benny Pedersen wrote: > Marc Perkel skrev den 2013-10-28 22:06: >> Just wondering if any real people are there or if it's totally >> automated. They have several of our IP addresses listed and delisting >> doesn't seem to work. We're a spam filtering company (Junk E

Re: How to get removed from spamcop?

2013-10-29 Thread Neil Schwartzman
you have to sign up for that service, and depending upon how your network is set up, you may not be able to receive such reports. I suggest people take a look at all the FBLs at http://blog.wordtothewise.com/tag/fbls/ as well Neil Schwartzman Executive Director Coalition Against unsolicited

Re: How to get removed from spamcop?

2013-10-28 Thread Neil Schwartzman
or wait 24 hours for the listing to expire. that said deput...@spamcop.net works just fine. Neil Schwartzman Executive Director Coalition Against unsolicited Commercial Email Tel :(303) 800-6345 Mob: (415) 361-0069 @cauce On Oct 28, 2013, at 3:08 PM, John Levine wrote: >> Just won

Re: Strange URIBL_SBL false positive?

2013-10-17 Thread Neil Schwartzman
On Oct 17, 2013, at 6:49 AM, Tom Hendrikx wrote: > > Basicly the description "Contains an URL listed in the SBL blocklist > [URIs: example.com]" is false, incorrect, not false, which implies maliciousness. I believe Spamhaus only recently, for some value of recently, started doing NS listing

Re: one word spam (continued)

2013-10-16 Thread Neil Schwartzman
List verification. Many receiving sites will block after X bounces, clean up your list from 550s, and spam the real thing from another botted IP. Neil Schwartzman Executive Director Coalition Against unsolicited Commercial Email Tel :(303) 800-6345 Mob: (415) 361-0069 @cauce On Oct 16

Re: Is EndOfSpam a known scam?

2013-09-02 Thread Neil Schwartzman
On Sep 2, 2013, at 9:26 AM, Marcus Loxx wrote: > Hello. My name is Marcus Loxx. > > First, please let me know if this is the correct way to post a question. > Second, the question is more about spam filtering in general than > SpamAssassin, but I couldn't think of a better place to post it. If

Re: Catching fake LinkedIn invites

2013-08-29 Thread Neil Schwartzman
On Aug 29, 2013, at 4:40 AM, RW wrote: > On Thu, 29 Aug 2013 00:55:29 +0200 > Michael Schaap wrote: > >> On 29-Aug-2013 00:30, John Hardin wrote: >>> On Wed, 28 Aug 2013, Michael Schaap wrote: >>> Hi, I'm getting loads of fake LinkedIn invites, most of which aren't caught

Re: Big problems with senders who use Microsoft Bigfish (a.k.a. FrontBridge)

2013-08-16 Thread Neil Schwartzman
Alternatively, I pulled fire alarms at Microsoft and it is very possible people at Spamhaus also spent reacting to your email because of the erroneous information posted. So while John may have been slightly impolitic,and fairly rude, he isn't wrong, and it isn't about ego (in this case). I can

Re: DHL From Russia

2013-08-09 Thread Neil Schwartzman
On Aug 9, 2013, at 6:16 AM, Thomas Harold wrote: > We see a few of these each week, not sure if they are from Russia: > > http://pastebin.com/iBmELtSh Not really that difficult to block. 31.24.139.73 Senderscore of '3'(out of 100) https://senderscore.org/lookup.php?lookup=31.24.139.73&ipLoo

Re: spamcop spamassassin reporting

2013-07-20 Thread Neil Schwartzman
On Jul 20, 2013, at 12:16 AM, AndreaS Schamanek wrote: > Giles Coochey wrote: >> Is there a current issue with reporting to spamcop? > > I had problems, too. Though, in my case I just got a warning message on the > Spamcop web interface saying that messages sent to me were bouncing with > "5.1

Re: Blocking new spam wave

2013-07-20 Thread Neil Schwartzman
On Jul 19, 2013, at 10:35 PM, Andrea wrote: > Hi all. > > Since a few days ago I'm being buried under spam messages that slip through > my amavis/SA setup. > The messages all look alike: plaintext with random junk + URL in the body. > Pastebin with a few examples here: http://g2z.me/ed64d > >

Re: PayPal spam filter?

2013-06-13 Thread Neil Schwartzman
On Jun 12, 2013, at 3:37 PM, Daniel McDonald wrote: > I believe Paypal is DKIM signed, Sure is. Also DMARCed and SPFed too. ;; QUESTION SECTION: ;paypal.com.IN TXT ;; ANSWER SECTION: paypal.com. 7 IN TXT "v=spf1 include:pp._spf.paypal.co

Re: Massive spamruns

2013-06-12 Thread Neil Schwartzman
Uhm. perhaps some snippets from the maillogs, or examples? On Jun 12, 2013, at 5:59 AM, polloxx wrote: > Dear list, > > We see massive spamruns since begin june. Are other people also similar runs? > They fill our maillog. Fortunately most is blocked. smime.p7s Description: S/MIME cryptogra

Re: Interesting Spam Trap Idea - Fake Authentication

2013-06-11 Thread Neil Schwartzman
On Jun 10, 2013, at 9:30 PM, Dave Warren wrote: > I doubt it's "a guy", but it wouldn't surprise me if the botnet that performs > the dictionary attack forwards the results off to "a guy" to confirm that > the account works. no, really, it's a bot. They have tens of millions of compromised a

Re: .pw / Palau URL domains in spam

2013-05-06 Thread Neil Schwartzman
On May 6, 2013, at 10:39 AM, Matus UHLAR - fantomas wrote: >> On May 6, 2013, at 9:08 AM, John Hardin wrote: >>> If there is a working abuse@ address that *isn't being ignored*, they're >>> compliant. > > On 06.05.13 09:55, Neil Schwartzman wrote: >

Re: .pw / Palau URL domains in spam

2013-05-06 Thread Neil Schwartzman
heh, i don't think 'don't ignore' is part of the RFC, but yeah. On May 6, 2013, at 9:08 AM, John Hardin wrote: > If there is a working abuse@ address that *isn't being ignored*, they're > compliant.

Re: .pw / Palau URL domains in spam

2013-05-06 Thread Neil Schwartzman
compliant with RFCs. There is nothing wrong with having an alternate address, particularly since abuse@ tends to garner a ton of spam. Neil Schwartzman Executive Director CAUCE - the Coalition Against Unsolicited Commercial Email Mob: (415) 361-0069 Skype: spamfighter666 SkypeIn: (303) 800-6345

Re: NJABL is dead?

2010-12-28 Thread Neil Schwartzman
Yeah sorry, I was confused by the subject line which mislead me to think the point was about whether or not NJABL is still a functioning DNSBL. Silly me. -- Neil Schwartzman Senior Director, Security Strategy Email Intelligence Group Return Path Inc. +1 (303) 999-3217 AIM: returnpathcanuk http

Re: NJABL is dead?

2010-12-28 Thread Neil Schwartzman
That would not be correct. NJABL is alive and kicking, and not all of their zones are replicated at Spamhaus. The XBL provides more than 'just' CBL + NJABL, BTW. -- Neil Schwartzman Senior Director, Security Strategy Email Intelligence Group Return Path Inc. +1 (303) 999-3217 AIM: retur

Out of Office (was: Difference in spam score for seperate email machines with same version of Spamassassin)

2010-11-29 Thread Neil Lazarow
, -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Out of Office (was: Difference in spam score for seperate email machines with same version of Spamassassin)

2010-11-29 Thread Neil Lazarow
, -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Out of Office (was: Difference in spam score for seperate email machines with same version of Spamassassin)

2010-11-29 Thread Neil Lazarow
, -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Out of Office (was: Negative score, yet marked as spam.)

2010-11-29 Thread Neil Lazarow
, -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Out of Office (was: Negative score, yet marked as spam.)

2010-11-29 Thread Neil Lazarow
, -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Out of Office (was: SPF technical problems (was Re: email address forgery))

2010-11-29 Thread Neil Lazarow
, -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Out of Office (was: facebook phishing, SPF_PASS)

2010-11-29 Thread Neil Lazarow
, -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Out of Office (was: facebook phishing, SPF_PASS)

2010-11-29 Thread Neil Lazarow
, -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Phishing Attack: An Open Letter to the Anti-Spam and Mailbox Operator Community By Matt Blumberg CEO & Chairman, Return Path

2010-11-28 Thread Neil Schwartzman
://www.returnpath.net/blog/received/2010/11/phishing-attack-an-open-letter-to-the-anti-spam-and-mailbox-operator-community/ -- Neil Schwartzman Senior Director Security Strategy, Receiver Services Tel: (303) 999-3217 AIM: returnpathcanuk http://www.returnpath.net/blog/received/ Help the poor help

Re: sidewide learning need further informations

2010-09-01 Thread Neil Lazarow
25 -- Neil Lazarow - IT Sales / Systems Engineering Naknan, Inc. IT Solutions SDB, HMBC Member Minority, Woman-Owned TX HUB Cisco Authorized Reseller NEC Authorized Reseller Phone: 281-990-0030 ext 22 Fax: 281-990-0033 nlaza...@naknan.com

Re: SPF soft fail problem

2010-08-23 Thread Vergottini . Neil
ms.com. 30 IN SPF "v=spf1 mx -all Okay, that explains it. I should have thought about checking all three DNS servers. I didn't think about it because I was always getting back the same result. Thanks. I will notify the mail administrator to get it fixed. Neil

Re: SPF soft fail problem

2010-08-23 Thread Vergottini . Neil
rmit > > send a email to postmaster and show your logs about the softfail > problem, thay will thank you for helping :) Thanks. I am trying to contact the mail administrator through the user to get them to correct their SPF record. Neil

Re: SPF soft fail problem

2010-08-23 Thread Vergottini . Neil
rd fail instead of a soft fail as specified by the SPF record. Neil --- 2010-08-22 21:22:30 1OnLk4-0005H0-MS H=server70a.appriver.com (server70.appriver.com) [69.20.116.35] F= rejected after DATA: Message scored 12.8 spam points. Envelope-from: Envelope-to: P Received: from server

SPF soft fail problem

2010-08-23 Thread Vergottini . Neil
stion is nawilliams.com. This is the SPF record: "v=spf1 mx ptr ~all" I'm seeing other domains being hit with SPF_SOFTFAIL, so I am at a loss as to why this one isn't. What am I missing? I am using SpamAssassin 3.3.1 provided by Ubuntu 10.04. Neil

Re: Change .spamassassin directory

2010-07-22 Thread Neil Hodge
Karsten, all: > > I may be wrong, but I understand Neil is talking about a single, ISP > provided email address. Just about the same as any Gmail, Yahoo or GMX > address. There is NO way for a 5xx SMTP response. In fact, he was > explicitly talking about an IMAP account, so th

Re: Change .spamassassin directory

2010-07-22 Thread Neil Hodge
that the solution I came up with might have some fatal flaw, but I thought I would give it a shot first . . . Neil

Re: Change .spamassassin directory

2010-07-22 Thread Neil Hodge
subdirectory tree that gets synched. > > Also, I would avoid *any* usage of 'spamassassin' command line options, > unless for debugging. See the note above regarding such options and > later use of spamd. > Well, maybe I will just break down and get client/server working now . . . Neil

Change .spamassassin directory

2010-07-22 Thread Neil Hodge
;sa-update'? at /usr/bin/spamassassin line 403." Neither does the symbolic link .spamassassin -> /path/to/saprefs work, i.e. it keeps getting changed to an actual directory. I am running SA 3.3.1 from within procmail. Any ideas??? Thanks. Neil Hodge

Spamhaus Uncovers Fake DNSBL: nszones.com

2010-03-31 Thread Neil Schwartzman
Spamhaus has uncovered a fake spam filter company which was pirating and selling DNSBL data stolen from major anti-spam systems including Spamhaus, CBL and SURBL, republishing the stolen data under the name "nszones.com". more: http://www.spamhaus.org/organization/statement.lasso?ref

thelinktrack.com URL redirect

2010-03-23 Thread neil
Hi; We are noticing a number of phishing mails with a clone of one of our webmail pages coming in. The interesting thing is the site they bounce through. The site collects some user info such as OS, browser etc. It appears an interesting way to obfuscate a url and collect data at the same time.

Re: users Digest 19 Mar 2010 11:56:42 -0000 Issue 3121

2010-03-19 Thread Neil Schwartzman
orks. They have some stringent limitations in how address-book uploads are undertaken and user accounts deployed. "the linkedin 'never send me email' has never worked" If you have verifiable proof of this, feel free to send it to my attention offlist, and I will have someone h

Re: Is there a WANTS_MY_INFO rule?

2009-10-22 Thread neil
Hi; Marc Perkel wrote: > To catch this: > > In order to confirm you Web-Mail identity, you are to provide the > following data; I have a generic phishing rule to reduce the incidence of customers giving out their data. It could be easily modified to hit your example. I got the basic idea from

Re: OT: Q about habeas marks

2009-09-03 Thread Neil Schwartzman
redirects to > http://seal.habeas.com/Company_Feedback.php Nope, not here. I get: "This page has disappeared We are sorry, but the page you were looking for can't be found. Don't worry though, we will help get you to the right place. When in doubt -- goto the home page:

Re: OT: Q about habeas marks

2009-09-03 Thread Neil Schwartzman
habeas.com/Company_Feedback.php > ip: 174.143.89.6 > > using your marks illegally? > > was source in question. That IP is on the Safe whitelist. Problem? You can check the status of any IP you wish at http://senderscore.org -- Neil Schwartzman Director, Certification Security & Standards Return Path Inc. 0142002038

Re: OT: Q about habeas marks

2009-09-03 Thread Neil Schwartzman
r:Habeas > x-habeas-report:Please report use of this mark in spam to > www.habeas.com/report/ > > -- Neil Schwartzman Director, Certification Security & Standards Return Path Inc. 0142002038

Re: Geniuses at expedia.com

2009-08-06 Thread Neil Schwartzman
The geniuses send their regards; they are a customer so I pinged them: Hi Neil, Thanks for heads-up. I've forwarded the information to our corporate domain/smtp management folks. Sincerely, MUNGED Lead Opera

Re: Rules

2009-07-27 Thread Neil Schwartzman
d isn't it? This is a tough row to ho, and I've not gone down this road in a while but cunillingus is misspelt, potentially leading to the lack of reaction. By your rules. -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 01420

Re: Opt In Spam

2009-07-17 Thread Neil Schwartzman
On 17/07/09 4:03 PM, "Neil Schwartzman" wrote: > Your assertion that we encountered a block and then switched to a new IP > netblock is preposterous. We have several ranges and mail streams. You opted > in and then opted out. OK, in what timeframe? Minutes? Hours? The

Re: Opt In Spam

2009-07-17 Thread Neil Schwartzman
ses are broken, we want to know; I¹ve BCCed our CPO in on this. Thanks for the heads up. -- Neil Schwartzman Director, Certification Security & Standards Return Path Inc. 0142002038

Return Path Safe whitelist UPDATE [was: Opt In Spam]

2009-07-17 Thread Neil Schwartzman
Zero-out our scoring? That is and will always be your right. Making it a positive spam sign?? Well, if you run a home system with no users, I suppose no damage done. If you are running SA in front of actual users at a business installation, I'd think it very brave to incur known false po

Re: Opt In Spam

2009-07-16 Thread Neil Schwartzman
FOLLOW-UP: A process was hung on one of the 20 hives serving the whitelists and reported this IP as being listed. We've restarted the process and it is no longer reporting incorrectly. On 16/07/09 8:05 AM, "Neil Schwartzman" wrote: Now, I am aware that we recently change

Re: Opt In Spam

2009-07-16 Thread Neil Schwartzman
15 Jul 2009 09:14:24 -0700 > From: "Paul DiFrancesco: Eight Legged Media" > To: embroid...@x.com > Subject: Visit with over 25 suppliers > This is a multi-part message in MIME format. > > -- Neil Schwartzman Director, Certification Security & Standards Return Path Inc. 0142002038

Re: Spam Filter Law Suit

2009-07-15 Thread Neil Schwartzman
can¹t imagine why http://neilschwartzman.com//Neil_Schwartzman/shared/pat6952719.pdf http://neilschwartzman.com//Neil_Schwartzman/shared/harris-complaint.pdf -- Neil Schwartzman Director, Certification Security & Standards Return Path Inc. 0142002038

Re: Questionable Rule

2009-07-08 Thread Neil Schwartzman
#x27;m saying they are > scamming and abusing, as well as spamming. Ah, our good friends at E Z Publishing. They are an ESP, apparently one of the clients is being bad. Please send me a complaint with FULL headers to habeas@abuse.net and I'll take care of this immediately, as will EZP. Thanks for the heads up. -- Neil Schwartzman Director, Certification Security & Standards Return Path Inc. 0142002038

Re: constantcontact.com

2009-07-06 Thread Neil Schwartzman
the directory and your name is not in there? Perhaps there is a > misspelling or something? Perhaps you can use this new thing called 'google' they have out, it is way kewl: http://www.google.com/search?client=safari&rls=en-us&q=Tara+Natanson+%2B+con stant+contact&ie=UTF-8&oe=UTF-8 -- Neil Schwartzman Director, Certification Security & Standards Return Path Inc. 0142002038

Re: Freelotto.com

2009-07-06 Thread Neil Schwartzman
ing them out is certainly within your right. Making them a positive sign given the totality of our client list would be, in my mind, silly. Unless you enjoy false positives. -- Neil Schwartzman Director, Certification Security & Standards Return Path Inc. 0142002038

Private whitelisting

2009-06-08 Thread Neil Schwartzman
a clue offered as to how to call them from SA. TIA -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: Barracuda Blacklist

2009-05-30 Thread Neil Schwartzman
On 29/05/09 4:09 PM, "Bob O'Brien" wrote: > Neil, > > Based on our "Requests for Removal" filed over the past 3+ weeks from > ReturnPath, the number of IPs that you are claiming to have had issues with > appears inflated by a factor of nearly 50%.

Re: Barracuda Blacklist

2009-05-29 Thread Neil Schwartzman
On 29/05/09 9:32 AM, "Andy Dorman" wrote: > Neil Schwartzman wrote: >> >> Given the huge amount of bumph I've seen and heard about emailreg.org, I >> figured it would be an interesting experiment to see if what everybody >> feared was happening was tr

Re:

2009-05-29 Thread Neil Schwartzman
s Please > take some time to have a check, They must have something you'd like to > buy. -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: Barracuda Blacklist

2009-05-28 Thread Neil Schwartzman
ent IP, and there are a raft of DNSBL operators to back me up on that one. Our clients get listed, I want to know why, but I never ever ever ask for delistings. Ever. Why would I? -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: Barracuda Blacklist

2009-05-28 Thread Neil Schwartzman
ffecting large proportions of a client IP space, or repeated offenses earns a client a trip to the woodshed, and if that doesn't get them to correct their errant ways, we invite them to no longer darken our door. It isn't worth it to them, nor to us. -- Neil Schwartzman Director, Accreditat

Return Path Certified metrics

2009-05-28 Thread Neil Schwartzman
Unsubscribe Functionality FQ rDNS SPF DKIM RFC Role account functionality CBL PBL XBL DROP FBL Sign-up Volume Sufficiency -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: Barracuda Blacklist

2009-05-28 Thread Neil Schwartzman
d them in the past 30 days ... I realize I owe this group a list of things we check. Stand by. -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: Barracuda Blacklist

2009-05-28 Thread Neil Schwartzman
have been using for 3 years, developed without public consultation. Enabled = on the whitelist Suspended = removed from the whitelist, live in the client account Disabled = removed from the client account -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Retur

Re: Barracuda Blacklist

2009-05-28 Thread Neil Schwartzman
On 28/05/09 10:42 AM, "Karsten Bräckelmann" wrote: > Yes, every list does have occasional FPs. So your point about those 22 > listings is what exactly? My point is the 409 false positives. Sorry if I was unclear or obtuse. -- Neil Schwartzman Director, Accreditation Secu

Re: Barracuda Blacklist

2009-05-28 Thread Neil Schwartzman
8. In some rare cases, your recipients' Barracuda Spam Firewall may be misconfigured -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038 The opinions contained herein are my personal stance and may not reflect the viewpoint of Return Path Inc.

Re: Got dead domains that get a lot of spam?

2009-05-19 Thread Neil Schwartzman
strike out in wildly new directions. ;-) Ok seriously, why take a chance? There tends to be coherence between the OED and American Heritage in terms of definitions. Why try to start a new one for dead domain? -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: Got dead domains that get a lot of spam?

2009-05-19 Thread Neil Schwartzman
tarbaby.junkemailfilter.com. It will help stop > spammers at the source. > > -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: FreeMail plugin updated - banks

2009-05-13 Thread neil
Hi; Ned Slider wrote: >First up, from Mike's inspiration above, I came up with these: I took your rule and added some meta rules to it. I'm getting hits on phishes, but I haven't seen any legitimate traffic hit it. This may be that I have not seen any real bank mail or it could be that it misse

Re: FreeMail plugin updated - banks

2009-05-12 Thread neil
Hi; Ned Slider wrote: >My point is it's really not easy to track down such information even when banks do occasionally try to do the right thing. Maybe there is already a >list out there. If not, maybe we should compile one? It's hard work trying to do it by yourself, but done as a group it w

Re: Phishing

2009-04-26 Thread Neil Schwartzman
On 24/04/09 11:44 PM, it was written: > Most people do not fall for it, but the dumbest ones do fall for it. This is not a question of intellect, it is a question of the verisimilitude of the messaging. -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist

Re: Spam Rats - does anyone know them?

2009-04-09 Thread Neil Schwartzman
ertified and Safelist whitelists, and we are rolling out DKIM as a requirement sometime this year. -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: Spam Rats - does anyone know them?

2009-04-09 Thread Neil Schwartzman
"KEYWORD= profanity: bitch;sexual discrimination: bitch" Sent from: "Neil Schwartzman " Folder: "SMTP Messages\Inbound" Location: "psp/TRACYSV05" On 09/04/09 3:55 PM, "Neil Schwartzman" wrote: > On 09/04/09 2:35 PM, "Matus UHLAR - fan

Re: Spam Rats - does anyone know them?

2009-04-09 Thread Neil Schwartzman
d clarity or rDNS resolution HELO, and so on and it is something *we* recommend to our certified and safelisted clients (beyond FQ rDSN which is a requirement), but blocking on something that is far far far from an industry standard? I'd suggest that is silly at best, but "do tell us how

Re: simple script idea for checking reputation disagreement

2009-04-06 Thread Neil Schwartzman
On 06/04/09 10:53 AM, "Matus UHLAR - fantomas" wrote: > On 04.04.09 16:30, Neil Schwartzman wrote: >> On 04/04/09 4:22 PM, "RobertH" wrote: >> >>> 0.2 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP >>> address >

Re: simple script idea for checking reputation disagreement

2009-04-05 Thread Neil Schwartzman
d, runningtimes.com and runnersworld.com may be "legit"). Consent, not content (well, mostly), mouss. As unlikely as it sounds to you and me, people *do* sign up for this stuff. Anyway, quite offtopic to this discussion group. -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: simple script idea for checking reputation disagreement

2009-04-04 Thread Neil Schwartzman
ois.arin.net PaeTec Communications, Inc. PAETECCOMM (NET-209-92-0-0-1) 209.92.0.0 - 209.92.255.255 Rodale Inc. RODALE-430488 (NET-209-92-22-0-1) 209.92.22.0 - 209.92.23.255 # ARIN WHOIS database, last updated 2009-04-03 19:10 -

Re: simple script idea for checking reputation disagreement

2009-04-04 Thread Neil Schwartzman
e's enough senders in the world who actually do need help, we don't need to create business. Thanks. -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: simple script idea for checking reputation disagreement

2009-04-04 Thread Neil Schwartzman
oks for when specific types of > rules (whitelist / blacklist or other reputation rules) should be in > agreement, yet oppose each other? > > i realize that it is time sensative on some types of rules yet this is > reputation based on actual domain name and ip address Yes pleas

Re: How long does it take to install SA?

2009-03-27 Thread Neil Schwartzman
On 26/03/09 10:29 PM, "Matt Kettler" wrote: > Neil Schwartzman wrote: >> >> Say one is using Postfix and needs SA in front of ~15 aliases. How >> long should this take? > > That depends mostly on how you want to integrate SA into postfix. > > Instal

How long does it take to install SA?

2009-03-26 Thread Neil Schwartzman
Say one is using Postfix and needs SA in front of ~15 aliases. How long should this take? -- Neil Schwartzman Director, Accreditation Security & Standards Certified | Safelist Return Path Inc. 0142002038

Re: HABEAS_ACCREDITED_COI

2009-03-17 Thread Neil Schwartzman
On 17/03/09 6:59 AM, "John Hardin" wrote: > A question if I may, Neil: does returnpath run any spamtraps to see > whether your clients are indeed violating your terms? Having few > complaints is not necessarily a good metric given the number of people who > will simply cur

Re: HABEAS_ACCREDITED_COI

2009-03-17 Thread Neil Schwartzman
#x27;s about 800 of them. These are not placating platitudes; again, we take this seriously. Without our receiving partners, our product becomes valueless. This is a point recognized and acknowledged all the way to the top of the company, and unlike Habeas, I do not report to Sales. That's not h

Re: HABEAS_ACCREDITED_COI

2009-03-17 Thread Neil Schwartzman
roblems spammers bring. They are both proactive, and in my opinion, rapidly reactive to problems brought to their attention. If you spot spam coming off their systems, send it to ab...@ning.com and copy us in at the address listed on the wiki. We want to hear about it, and we want to help Ning put

Re: ReturnPath, Habeas, BondedSender

2009-03-10 Thread Neil Schwartzman
aints, both loud AND clear. -- Neil Schwartzman Director, Accreditation Standards & Security Sender Score Certified | Sender Score Safelist Return Path Inc. 0142002038

Re: ReturnPath, Habeas, BondedSender

2009-03-01 Thread Neil Schwartzman
s ever happens again, get the person's name and write to me directly. Using the purpose-built addresses will go direct to our compliance queue and avoid any possibility of such nonsense. -- Neil Schwartzman Director, Accreditation Standards & Security Sender Score Certified | Sender Score Safelist Return Path Inc. 0142002038

  1   2   >