Re: Auth questions

2009-10-30 Thread Matus UHLAR - fantomas
> >> I believe they all need full participation for them to be effective? > > > > That depends on your definition of "effective".  Each of these methods > > provides the recipient a way of determining the legitimacy of an email. > > If the sender is using one or more of these on his outgoing emails

Re: Auth questions

2009-10-29 Thread Mark Martinec
> But I think the trouble is that SPF_FAIL and DKIM_SIGNED without > DKIM_VERIFIED doesn't necessarily mean it's not being spoofed, right? > > For that reason I really haven't been able to make scoring decisions > on either of them. Both the DKIM_SIGNED and the DKIM_VERIFIED (now renamed to DKIM

Re: Auth questions

2009-10-29 Thread Alex
Hi, > I think the point is that the Habeas headers are no longer used (because > they were too easy to fake).  The new Return Path system is now IP > based.  So any email that has a Habeas header was either created by a > previous Habeas customer who has not updated their configuration, or a > spa

Re: Auth questions

2009-10-29 Thread John Hardin
On Thu, 29 Oct 2009, Alex wrote: Anyone can add a Habeas header. ?At best, it means they've got an outdated configuration; at worst, it means they're spammers trying to get past filters. Isn't SPF and DKIM essentially as easily defeated? SPF and DKIM have different goals than Habeas. They s

Re: Auth questions

2009-10-29 Thread Bowie Bailey
Alex wrote: >> Anyone can add a Habeas header. At best, it means they've got an outdated >> configuration; at worst, it means they're spammers trying to get past >> filters. >> >> https://senderscore.org/lookup.php?lookup=208.85.50.30 reveals that the >> 208.85.50.30 is not currently accredited un

Re: Auth questions

2009-10-29 Thread Alex
Hi, > Anyone can add a Habeas header.  At best, it means they've got an outdated > configuration; at worst, it means they're spammers trying to get past > filters. > > https://senderscore.org/lookup.php?lookup=208.85.50.30 reveals that the > 208.85.50.30 is not currently accredited under the "Retu

Re: Auth questions

2009-10-28 Thread J.D. Falk
Adam Katz wrote: Messages2 and/or mkt058.com have been thorough in working to ensure their mail gets delivered cleanly, using SPF, DKIM, and Habeas (which are all sender verification tools, the last of which is a sort of "we promise this isn't spam" tool). The message also has a List-Unsubscrib

Re: Auth questions

2009-10-27 Thread Alex
Hi, Thanks so much for everyone's help on this. I appreciate your spending the time to school me. Best, Alex On Tue, Oct 27, 2009 at 4:26 PM, Ted Mittelstaedt wrote: > Alex wrote: >> >> Hi, >> >> I'm trying to figure out if this is spam: >> >> http://pastebin.com/m64a38b1 >> > > I don't have an

Re: Auth questions

2009-10-27 Thread Ted Mittelstaedt
Alex wrote: Hi, I'm trying to figure out if this is spam: http://pastebin.com/m64a38b1 I don't have an opinion on the sender in question but we have seen an increasing number of mails of this type - call it "pseudo-spam" if you will. What it is, is legitimate companies who are using the -fl

Re: Auth questions

2009-10-27 Thread Adam Katz
Alex (aka "MySQL Student") wrote: > I'm trying to figure out if this is spam: > http://pastebin.com/m64a38b1 > > I've had to obscure it to get around pastebin's spam filter by > changing the '@' to '%#' in this message. The exxample.com is also > my change. > > Is the habeas stuff right? How abo

Auth questions

2009-10-27 Thread Alex
Hi, I'm trying to figure out if this is spam: http://pastebin.com/m64a38b1 I've had to obscure it to get around pastebin's spam filter by changing the '@' to '%#' in this message. The exxample.com is also my change. Is the habeas stuff right? How about mkt058.com? Is that a valid server for shu