Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-22 Thread Chris
Agreed, it seems to be deliberate to get people moved over to the big providers, they are clearly discouraging independent email servers as they clearly scored differently. I have even been doing tests on various spare unused ip's and the amount that get blocked by microsoft (but no other provider

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-19 Thread Loren Wilton
Cian is rumored to have said: Anne, I am incredibly grateful for the offer. I sent my emails to the tester and to the support email. Hopefully, they come up with something actionable. If you get a useful result it might be nice to summarize it to the list. Loren

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-19 Thread John Hardin
On Sat, 19 Feb 2022, Greg Troxel wrote: As for your "domain", also look up the IP address your mail comes from, because that's more important. A lookup service I have found useful is: https://multirbl.valli.org/ Ok, actually, I got some interesting results for 136.143.188.53, which is a Zo

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-19 Thread Cian ApacheBugzilla
Thanks for the advice, Greg. >I am not saying what you should do. My point is that you do not seem to truly understand what is going on (fair enough, the world is opaque and complicated) and that understanding it is good. I would agree with this statement. The challenge is, it is very difficult

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-19 Thread Anne P. Mitchell, Esq.
Cian, first, MailTester (and also the other automated systems) is notoriously bad about giving false negatives because so long as it finds *a* record (such as an SPF record) it considers it "ok"; this is why we've gone to a human-review system for test emails - I'd say in at least half the cases

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-19 Thread Greg Troxel
Cian ApacheBugzilla writes: >> However, the shared IP comment is worth paying attention to > > Ah, so you think I should get a dedicated IP? I had read mixed things I meant tha you should understand what's going on. > I'm a little confused which way you mean this. If I understand > correctly

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-19 Thread Matus UHLAR - fantomas
On 19.02.22 08:32, Cian ApacheBugzilla wrote: Thanks for the advice Greg! Your mail is in html Bill Cole mentioned that, and I did try sending a plain text email to no effect. The email that you are replying to is unusually atrocious because the only way I could figure out to reply to a mail

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-19 Thread Cian ApacheBugzilla
Thanks for the advice Greg! >Your mail is in html Bill Cole mentioned that, and I did try sending a plain text email to no effect. The email that you are replying to is unusually atrocious because the only way I could figure out to reply to a mailing list email I hadn't received was, ironically,

RE: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-19 Thread Marc
Complain to the European Union. It is not in Microsoft's and google's interest to fix this. By frustrating/sabotaging other providers services, they create an environment where users are forced to switch to the outlook.com/gmail.com cloud. Eg. what you have done is already more than gmail.com is

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-18 Thread Dominic Raferd
On Sat, 19 Feb 2022, 01:10 Cian, wrote: > I am also having a world of trouble getting my emails to Outlook users. > For reference, my work domain has one user (me). I have had the account > for about 9 months and I have not yet sent 100 emails. I typically send an > email to a single recipient,

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-18 Thread Greg Troxel
Your mail is in html. That will get it some points; I suggest text/plain :-) Many will say I'm just being a curmudgeon about this. Attempting to recover content and continuing: Cian writes: > I am also having a world of trouble getting my emails to Outlook > users. For reference, my wo

RE: OT - Hotmail/Outlook.com marking most of our email as Junk

2022-02-18 Thread Cian
I am also having a world of trouble getting my emails to Outlook users.  For reference, my work domain has one user (me).  I have had the account for about 9 months and I have not yet sent 100 emails.  I typically send an email to a single recipient, although I will occasionally CC a handful of peo

Re: gmail hotmail picture and a lot of spam-rubish

2021-04-09 Thread Matus UHLAR - fantomas
On 09.04.21 15:40, mau...@gmx.ch wrote: Spam will send from Gmx to domain.ch and so I recieve every spam mail. you should filter spam before forwarding then. Please what I need read, or any help to minimize the rush, thanks for any possible help! unfortunately, you missed all Received: he

Re: AW: gmail hotmail picture and a lot of spam-rubish

2021-04-09 Thread mauric
Sorry Benny, >> Please broter make shorter way, I don’t have plenty of time 😊 >do you know what sieve autoreader is ? historical questions? >long version: i don need time to read reply's anymore … m please let me think, it’s a other mailinglist?, yes, ok I understood ! If you

Re: AW: gmail hotmail picture and a lot of spam-rubish

2021-04-09 Thread Benny Pedersen
On 2021-04-09 16:59, mau...@gmx.ch wrote: Please broter make shorter way, I don’t have plenty of time 😊 do you know what sieve autoreader is ? long version: i don need time to read reply's anymore

Re: AW: gmail hotmail picture and a lot of spam-rubish

2021-04-09 Thread mauric
>https://sanesecurity.com/ > there is a maillist for this aswell, ask on maillist with clamav signature > catch it > > or build localy own signature to catch it, spammers is very genious in 2021 > and others is not :=) But this are a joke? I need contact any other mailinglist, and you

Re: AW: gmail hotmail picture and a lot of spam-rubish

2021-04-09 Thread Benny Pedersen
On 2021-04-09 15:40, mau...@gmx.ch wrote: Spam will send from Gmx to domain.ch and so I recieve every spam mail. Please what I need read, or any help to minimize the rush, thanks for any possible help! https://sanesecurity.com/ there is a maillist for this aswell, ask on maillist with clama

AW: gmail hotmail picture and a lot of spam-rubish

2021-04-09 Thread mauric
-03-20) on nmail.domain.ch X-Virus-Scanned: clamav-milter 0.102.4 at nmail.domain.ch X-Virus-Status: Clean Von: Loren Wilton mailto:lwil...@earthlink.net> > Gesendet: Freitag, 9. April 2021 10:11 An: users@spamassassin.apache.org <mailto:users@spamassassin.apache.org> Betreff: Re:

Re: gmail hotmail picture and a lot of spam-rubish

2021-04-09 Thread Loren Wilton
We would need to see the original headers from the spam, or ideally the whole spam before we could say anything. It would also be helpful to see the rules it hit on your system. Loren

gmail hotmail picture and a lot of spam-rubish

2021-04-09 Thread mauric
After implementing spamassassin and spamssassin, the situation are better then bevor. also lot of women picture from Hotmail or gmail, but sencerly how I can eliminate this? Please how it's possible for block, this kind of mail? Thanks

Spam mail from Hotmail - Outlook - how to stop

2021-04-05 Thread mauric
Hello Please how i can filter/ban E-Mail from Hotmail, Outlook, with women pictures. Yes spamassassin and meny other tools installed and will block meny of bad E-Mail, the email With picture and more will also transfer. I think that I am on the right way with the application Spamassassin, I

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-26 Thread Groach
On 26/09/2017 20:08, David Jones wrote: There is the possibility that Hotmail doesn't like our IP address because it is a consumer/ADSL/end-user IP - although I've removed it from the Spamhaus PBL database. I guess Hotmail must be using an internal database I would put money on

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-26 Thread David Jones
dresses, as there is other infrastructure tied to this IP address (vpn, external laptops etc.) - so it would involve quite a bit of reconfiguration. Also, I doubt that it would do much good, as we've had this IP address for 5 years - so it is clean. There is the possibility that Hotmail do

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-26 Thread Rupert Gallagher
You need to learn from the feedback you received. Your server is still rejecting mail to postmas...@open-t.co.uk and ab...@open-t.co.uk, no wonder you are blacklisted!

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-26 Thread Sebastian Arcus
his IP address (vpn, external laptops etc.) - so it would involve quite a bit of reconfiguration. Also, I doubt that it would do much good, as we've had this IP address for 5 years - so it is clean. There is the possibility that Hotmail doesn't like our IP address because it i

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-21 Thread Benny Pedersen
John Hardin skrev den 2017-09-21 17:06: and just received an email saying that the IP address doesn't qualify for mitigation. I'm not sure if that means that the IP address is already clean at their end, or it is blacklisted or greylisted, but they don't want to unblock it. Or perhaps "you're

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-21 Thread John Hardin
On Thu, 21 Sep 2017, Sebastian Arcus wrote: and just received an email saying that the IP address doesn't qualify for mitigation. I'm not sure if that means that the IP address is already clean at their end, or it is blacklisted or greylisted, but they don't want to unblock it. Or perhaps "y

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-21 Thread Sebastian Arcus
it is blacklisted or greylisted, but they don't want to unblock it. On Thu, Sep 21, 2017 at 8:40 AM, Sebastian Arcus <mailto:s.ar...@open-t.co.uk>> wrote: On 19/09/17 10:29, Zulma Pape wrote: There are tons of ways to get your IP a good reputation with Hotm

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-21 Thread Sebastian Arcus
ne might throw in a useful idea - which would be much appreciated. I have this problem on one site where most emails we send to Hotmail/Outlook.com/Live.com email addresses end up in Junk at the recipient's end. Things I have tried: 1. I've setup SPF, DKIM, DMARC (and set it to &#

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-21 Thread Sebastian Arcus
On 19/09/17 10:29, Zulma Pape wrote: There are tons of ways to get your IP a good reputation with Hotmail. Start setting up the SNDS, this will help you monitor your reputation directly with Microsoft. Hi - thank you for the suggestions. I have signed up for the SNDS programme - which looks

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-20 Thread David B Funk
copy of the header, then look for clues in their anti-spam report.  Good luck with that. Have you ever seen the kind of stuff that M$ adds to Hotmail/Outlook.com/Office365 etc.. messages? Then when you try to track down any info on how to iterpret the dense pile of stuff in a 'x-foref

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-20 Thread Rupert Gallagher
> 10. The emails we send are operational and notices emails to customers - who need them. They call on the phone and complain they haven't received them - just to discover they were sent, but ended up in the junk. Tell them to send you a copy of the header, then look for clues in their anti-spam

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-20 Thread Rupert Gallagher
row in > a useful idea - which would be much appreciated. I have this problem on one > site where most emails we send to Hotmail/Outlook.com/Live.com email > addresses end up in Junk at the recipient's end. Things I have tried: 1. I've > setup SPF, DKIM, DMARC (and set it to &#x

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-19 Thread Jerry Malcolm
ed to SA, but I'm hoping that with the email and spam expertise on this group, someone might throw in a useful idea - which would be much appreciated. I have this problem on one site where most emails we send to Hotmail/Outlook.com/Live.com email addresses end up in Junk at the recipient&#

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-19 Thread David Jones
most emails we send to Hotmail/Outlook.com/Live.com email addresses end up in Junk at the recipient's end. Things I have tried: 1. I've setup SPF, DKIM, DMARC (and set it to 'reject'). 2. We used to smart relay outbound email through the hosting provider (1and1), but now

Re: OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-19 Thread G Roach
ppreciated. I have this problem on one site where most emails we send to Hotmail/Outlook.com/Live.com email addresses end up in Junk at the recipient's end. Things I have tried: 1. I've setup SPF, DKIM, DMARC (and set it to 'reject'). 2. We used to smart relay outbound

OT - Hotmail/Outlook.com marking most of our email as Junk

2017-09-18 Thread Sebastian Arcus
This is a bit off topic as it is not directly related to SA, but I'm hoping that with the email and spam expertise on this group, someone might throw in a useful idea - which would be much appreciated. I have this problem on one site where most emails we send to Hotmail/Outlook.com/Liv

Re: FORGED_HOTMAIL_RCVD2 and legit hotmail

2017-05-01 Thread Kevin A. McGrail
On 5/1/2017 3:51 PM, John Hardin wrote: Primarily, get the masscheck infrastructure working again. This is moving along. Thanks to some volunteers like David Jones, we are working on rebuilding that system with documentation so that we don't go through this again! Regards, KAM

Re: FORGED_HOTMAIL_RCVD2 and legit hotmail

2017-05-01 Thread John Hardin
On Mon, 1 May 2017, Alex wrote: Hi, On Mon, May 1, 2017 at 12:46 AM, Axb wrote: On 04/30/2017 10:48 PM, John Hardin wrote: On Sun, 30 Apr 2017, Alex wrote: Hi, is it possible hotmail is now using outlook.com to route and process their email? Or perhaps this user is using outlook to send

Re: FORGED_HOTMAIL_RCVD2 and legit hotmail

2017-05-01 Thread Alex
Hi, On Mon, May 1, 2017 at 12:46 AM, Axb wrote: > On 04/30/2017 10:48 PM, John Hardin wrote: >> >> On Sun, 30 Apr 2017, Alex wrote: >> >>> Hi, is it possible hotmail is now using outlook.com to route and >>> process their email? Or perhaps this user is

Re: FORGED_HOTMAIL_RCVD2 and legit hotmail

2017-05-01 Thread Matus UHLAR - fantomas
On Sun, 30 Apr 2017, Alex wrote: process their email? Or perhaps this user is using outlook to send their hotmail mail? If so, I believe the FORGED_HOTMAIL_RCVD2 rule is not considering this possibility. On 04/30/2017 10:48 PM, John Hardin wrote: That's entirely possible. I'm p

Re: FORGED_HOTMAIL_RCVD2 and legit hotmail

2017-04-30 Thread Axb
On 04/30/2017 10:48 PM, John Hardin wrote: On Sun, 30 Apr 2017, Alex wrote: Hi, is it possible hotmail is now using outlook.com to route and process their email? Or perhaps this user is using outlook to send their hotmail mail? If so, I believe the FORGED_HOTMAIL_RCVD2 rule is not considering

Re: FORGED_HOTMAIL_RCVD2 and legit hotmail

2017-04-30 Thread Benny Pedersen
John Hardin skrev den 2017-04-30 22:48: That's entirely possible. I'm pretty sure I've seen messages purporting to be from a hotmail user that were processed by outlook.com. I'll check my corpora and see if I can confirm that. i have seen most spam hotmail.com senders

Re: FORGED_HOTMAIL_RCVD2 and legit hotmail

2017-04-30 Thread John Hardin
On Sun, 30 Apr 2017, Alex wrote: Hi, is it possible hotmail is now using outlook.com to route and process their email? Or perhaps this user is using outlook to send their hotmail mail? If so, I believe the FORGED_HOTMAIL_RCVD2 rule is not considering this possibility. That's entirely pos

FORGED_HOTMAIL_RCVD2 and legit hotmail

2017-04-30 Thread Alex
Hi, is it possible hotmail is now using outlook.com to route and process their email? Or perhaps this user is using outlook to send their hotmail mail? If so, I believe the FORGED_HOTMAIL_RCVD2 rule is not considering this possibility. Received: from BN3NAM04FT034.eop-NAM04

Update suggestion for hotmail rule

2017-04-30 Thread Pedro David Marco
Hi, sorry if discussed before and i missed it but, the rule FORGED_HOTMAIL_RCVD2 triggers when a hotmail email does not come from hotmail or msn servers, but actually they come oftenly from outlook.com   regards, -PedroD

Re: Genuine mail from Hotmail hitting MALFORMED_FREEMAIL

2015-01-29 Thread Niamh Holding
Hello RW, Sunday, January 25, 2015, 10:55:59 PM, you wrote: R> There's not much that can be done about this other than rescore or R> remove it entirely. But this rule and MISSING_HEADERS combine to score 3.8 just because the sender put all the recipients in BCC Seems a touch high for this. -

Re: Genuine mail from Hotmail hitting MALFORMED_FREEMAIL

2015-01-25 Thread Reindl Harald
Am 25.01.2015 um 23:55 schrieb RW: On Sat, 24 Jan 2015 08:19:02 + Niamh Holding wrote: Sample at http://pastebin.com/mEFpUeS5 There's not much that can be done about this other than rescore or remove it entirely. It's picking up on the combination of FREEMAIL_FROM and a missing "From" he

Re: Genuine mail from Hotmail hitting MALFORMED_FREEMAIL

2015-01-25 Thread RW
On Sat, 24 Jan 2015 08:19:02 + Niamh Holding wrote: > > Hello > > Sample at http://pastebin.com/mEFpUeS5 > There's not much that can be done about this other than rescore or remove it entirely. It's picking up on the combination of FREEMAIL_FROM and a missing "From" header. Since most cl

Genuine mail from Hotmail hitting MALFORMED_FREEMAIL

2015-01-24 Thread Niamh Holding
Hello Sample at http://pastebin.com/mEFpUeS5 -- Best regards, Niamh mailto:ni...@fullbore.co.uk pgpe8wUMrN5Vl.pgp Description: PGP signature

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Ned Slider
locally defined ones. This works well here: the only difference is that I archive all incoming and outgoing mail and use my archive as the sender-whitelisting plugin's data source. That's pretty much what I've been doing too - hotmail, yahoo and aol score 6pts by default and legi

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Martin Gregorie
On Sun, 2011-10-16 at 20:02 +0200, Benny Pedersen wrote: > > I may never know they sent me an email. > > Unless I spend time going over my logs. > > ah you have logs ? :=) > A possible way out is to process the logs overnight, possibly as part of logwatch, and build a datastore of addresses that

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Benny Pedersen
mains like yahoo or hotmail or even aol. to big to be loved here, to much free and rfc-ignorant, no go ! There are legitimate accounts on them. yes, and spammers use this fact to get bypassed for not use ther domain as default blacklisted_from and whitelisted non spammers, oh well :)

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread RW
On Sun, 16 Oct 2011 05:12:59 -0700 Paul Cabot wrote: > The freemailer to freemailer idea is good.Chances are that is > more likely to be spam. It's separate freemail "from" and "reply-to" that's a good indicator, not "from" and "to". In fraud spams they commonly use a different account for

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Paul Cabot
On 16/10/2011 12:13 AM, haman...@t-online.de wrote: I've noticed a trend recently where I'm getting emails sent to me from either an aol or yahoo or hotmail account. But the email has a "to" address to some other account that is not mine. First off I'm p...@topgunco

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Paul Cabot
oo or hotmail or even aol. There are legitimate accounts on them. So unless someone gives me their email address before sending me an email. I may never know they sent me an email. Unless I spend time going over my logs. The random chars I sort of realized had something to do with a way of tryi

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread hamann . w
>> >> I've noticed a trend recently where I'm getting emails sent to me from >> either an aol or yahoo or hotmail account. But the email has a "to" >> address to some other account that is not mine. >> >> First off I'

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-15 Thread Benny Pedersen
On Sat, 15 Oct 2011 16:40:48 -0700, Paul Cabot wrote: blacklist_from *@aol.com whitelist_from_spf good-us...@aol.com users can then get a new url for free :-) Would that not blacklist everyone from aol.com unless I specifically allowed them with the whitelist_from_spf setting? currect if it

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-15 Thread Karsten Bräckelmann
On Sat, 2011-10-15 at 16:39 -0700, Paul Cabot wrote: > On 15/10/2011 3:39 PM, John Hardin wrote: > > > Is there any way of blocking emails sent to me that are not really > > > addressed to me. > > > > ...you don't ever want to receive legitimate BCCs? Or these very list posts, addressing the que

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-15 Thread Paul Cabot
On 15/10/2011 3:52 PM, Benny Pedersen wrote: On Sat, 15 Oct 2011 14:32:07 -0700, Paul Cabot wrote: I've noticed a trend recently where I'm getting emails sent to me from either an aol or yahoo or hotmail account. But the email has a "to" address to some other acco

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-15 Thread Paul Cabot
On 15/10/2011 3:39 PM, John Hardin wrote: On Sat, 15 Oct 2011, Paul Cabot wrote: Is there any way of blocking emails sent to me that are not really addressed to me. ...you don't ever want to receive legitimate BCCs? Didn't think about the fact that it would be because of me being a BCC.

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-15 Thread Benny Pedersen
On Sat, 15 Oct 2011 15:39:24 -0700 (PDT), John Hardin wrote: On Sat, 15 Oct 2011, Paul Cabot wrote: Is there any way of blocking emails sent to me that are not really addressed to me. ...you don't ever want to receive legitimate BCCs? blacklist_to *@aol.com :-) eg if header to contains sp

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-15 Thread Benny Pedersen
On Sat, 15 Oct 2011 14:32:07 -0700, Paul Cabot wrote: I've noticed a trend recently where I'm getting emails sent to me from either an aol or yahoo or hotmail account. But the email has a "to" address to some other account that is not mine. blacklist_from *@aol.com whitel

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-15 Thread John Hardin
On Sat, 15 Oct 2011, Paul Cabot wrote: Is there any way of blocking emails sent to me that are not really addressed to me. ...you don't ever want to receive legitimate BCCs? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 p

Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-15 Thread Paul Cabot
I've noticed a trend recently where I'm getting emails sent to me from either an aol or yahoo or hotmail account. But the email has a "to" address to some other account that is not mine. First off I'm p...@topguncomputers.com. I also run the postfix servers. Usual

Re: Help with tagging hotmail spam

2011-10-04 Thread Ned Slider
On 04/10/11 05:50, Alex wrote: Hi, I have a fedora15 box with v3.3.2 and I have some hotmail spam that I can't figure out how to catch: http://pastebin.com/kkUUvYQp It's hitting BAYES_00 and no blacklists or other significant spam rules and not sure how to tag it. The user ha

Re: Help with tagging hotmail spam

2011-10-03 Thread Alex
Hi, >> I have a fedora15 box with v3.3.2 and I have some hotmail spam that I >> can't figure out how to catch: >> >> http://pastebin.com/kkUUvYQp >> >> It's hitting BAYES_00 and no blacklists or other significant spam >> rules and not sure

Re: Help with tagging hotmail spam

2011-10-02 Thread Ned Slider
On 03/10/11 01:31, Alex wrote: Hi all, I have a fedora15 box with v3.3.2 and I have some hotmail spam that I can't figure out how to catch: http://pastebin.com/kkUUvYQp It's hitting BAYES_00 and no blacklists or other significant spam rules and not sure how to tag it. The user ha

Re: Help with tagging hotmail spam

2011-10-02 Thread Jason Haar
I followed the link and ended up downloading a Windows worm to my Linux laptop (Worm:Win32/Cridex.B if you care) So this isn't spam - it's a malware-run. Totally different rules apply to malware than spam - this sort of thing can only be fought by SA with RBL/SURBLs So the best response here woul

Re: Help with tagging hotmail spam

2011-10-02 Thread Martin Gregorie
On Sun, 2011-10-02 at 20:31 -0400, Alex wrote: > I have some hotmail spam that I can't figure out how to catch: > > http://pastebin.com/kkUUvYQp > > It's hitting BAYES_00 and no blacklists or other significant spam > rules and not sure how to tag it. The user has re

Help with tagging hotmail spam

2011-10-02 Thread Alex
Hi all, I have a fedora15 box with v3.3.2 and I have some hotmail spam that I can't figure out how to catch: http://pastebin.com/kkUUvYQp It's hitting BAYES_00 and no blacklists or other significant spam rules and not sure how to tag it. The user has reported receiving this spam sev

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-07 Thread Warren Togami Jr.
g prejudiced against Yahoo or Hotmail though. Warren

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-07 Thread David F. Skoll
4 points for spam-source and that seems to work pretty well. We don't get too many Yahoo or Hotmail spams slipping through and the FP rate is not too bad. We concur that Google has cleaned up its act tremendously since a year or two ago and is far cleaner than Hotmail or Yahoo. Regards, David.

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-07 Thread Ned Slider
ail separate from typical FREEMAIL. Been there, tried that. It is like stopping a river. I've tried metas with the originating source (FROM_AFRICA rules), metas with keywords, metas with short_urls... the list of junk coming out of Yahoo and Hotmail is just endless. Like you, I've

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-07 Thread J.D. Falk
On Mar 6, 2011, at 3:37 AM, Mynabbler wrote: > The amount of junkmail coming from your systems is unbelievable. How hard is > it to implement a cap on the amount of messages people can send out daily > with your systems. They do that. > And that includes the number of Cc's and Bcc's one > messag

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-07 Thread Mynabbler
mail separate from typical > FREEMAIL. > Been there, tried that. It is like stopping a river. I've tried metas with the originating source (FROM_AFRICA rules), metas with keywords, metas with short_urls... the list of junk coming out of Yahoo and Hotmail is just endless. And again, the sol

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-07 Thread Warren Togami Jr.
On 3/6/2011 3:15 AM, Ned Slider wrote: On 06/03/11 11:46, Warren Togami Jr. wrote: I have no comment on your proposed solution. I can however point out the statistics that I see on my own spam traps. It seems that 90%+ of the spam coming from DNSWL listed hosts is Yahoo and Hotmail which are

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-06 Thread Benny Pedersen
On Sun, 06 Mar 2011 13:15:01 +, Ned Slider wrote: > Personally I think it's about time FROM_HOTMAIL and FROM_YAHOO became > high scoring stock rules in SpamAssassin. A score of 3 points might be a > reasonable starting point. or RFC_ABUSE_POST score 10 atleast then thay have a chance htt

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-06 Thread Per Jessen
Ned Slider wrote: > On 06/03/11 11:46, Warren Togami Jr. wrote: >> I have no comment on your proposed solution. I can however point out >> the statistics that I see on my own spam traps. >> >> It seems that 90%+ of the spam coming from DNSWL listed hosts is >> Y

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-06 Thread Ned Slider
On 06/03/11 11:46, Warren Togami Jr. wrote: I have no comment on your proposed solution. I can however point out the statistics that I see on my own spam traps. It seems that 90%+ of the spam coming from DNSWL listed hosts is Yahoo and Hotmail which are listed as DNSWL_NONE. Meanwhile very few

Re: Open letter to Yahoo and Hotmail concerning junkmail

2011-03-06 Thread Warren Togami Jr.
I have no comment on your proposed solution. I can however point out the statistics that I see on my own spam traps. It seems that 90%+ of the spam coming from DNSWL listed hosts is Yahoo and Hotmail which are listed as DNSWL_NONE. Meanwhile very few spam comes from gmail.com. Apparently

Open letter to Yahoo and Hotmail concerning junkmail

2011-03-06 Thread Mynabbler
re a Yahoo administrator, the cap from %account%---%numb...@att.net need to be set to 10 messages daily. Sigh. -- View this message in context: http://old.nabble.com/Open-letter-to-Yahoo-and-Hotmail-concerning-junkmail-tp31079893p31079893.html Sent from the SpamAssassin - Users mailing list

Re: .info spam from Hotmail

2010-11-03 Thread Randy Ramsdell
Randy Ramsdell wrote: John Hardin wrote: On Wed, 3 Nov 2010, Kris Deugau wrote: DNSBLs are pretty much useless, since the message *was* legitimately relayed in from Hotmail. A couple of times I've seen enough examples with similar enough URLs to create a uri rule something like:

Re: .info spam from Hotmail

2010-11-03 Thread Randy Ramsdell
John Hardin wrote: On Wed, 3 Nov 2010, Kris Deugau wrote: DNSBLs are pretty much useless, since the message *was* legitimately relayed in from Hotmail. A couple of times I've seen enough examples with similar enough URLs to create a uri rule something like: uri MISC_INFOm|

Re: .info spam from Hotmail

2010-11-03 Thread John Hardin
On Wed, 3 Nov 2010, Kris Deugau wrote: DNSBLs are pretty much useless, since the message *was* legitimately relayed in from Hotmail. A couple of times I've seen enough examples with similar enough URLs to create a uri rule something like: uri MISC_INFO m|https?://rita..sa..ly\

.info spam from Hotmail

2010-11-03 Thread Kris Deugau
Anyone else seeing anything like this: http://www.deepnet.cx/~kdeugau/hotmail-spam.eml slipping through? Bayes is about the only thing I see getting any kind of ongoing handle on these (and that, BAYES_60 is a reason to celebrate) - the only content worth matching with more static rules is

Re: Hotmail false positives through the roof since 3.3.1 update.

2010-07-30 Thread Michael Scheidell
On 7/29/10 8:44 PM, Ray Dzek wrote: Hi all, I updated to 3.3.1 last week. The capture rate went way up, which is good, but… I am now getting complaints that “legit” Hotmail is getting tagged pretty much for every email coming in. set the freemail scores to 0 What would be the recommended

Re: Hotmail false positives through the roof since 3.3.1 update.

2010-07-29 Thread Sahil Tandon
On Thu, 2010-07-29 at 17:44:23 -0700, Ray Dzek wrote: > I updated to 3.3.1 last week. The capture rate went way up, which is > good, but... I am now getting complaints that "legit" Hotmail is > getting tagged pretty much for every email coming in. Which rules are hitting? D

Hotmail false positives through the roof since 3.3.1 update.

2010-07-29 Thread Ray Dzek
Hi all, I updated to 3.3.1 last week. The capture rate went way up, which is good, but... I am now getting complaints that "legit" Hotmail is getting tagged pretty much for every email coming in. What would be the recommended way to dial down the Hotmail detection? Thanks! Ray Dz

Re: url spam from Hotmail

2010-05-26 Thread Ned Slider
On 05/26/2010 05:29 PM, Karsten Bräckelmann wrote: Also, these Hotmail injected footers always use long-ish URIs with a path, no? In that case, a meta with __URI_NO_PATH could help. Something like this. uri __URI_NO_PATH m~^https?://[^/]+/?$~ That's possibly a good idea. I was thi

Re: url spam from Hotmail

2010-05-26 Thread Karsten Bräckelmann
> > I see quite a few of these from hotmail orginating from China. > X-Originating-IP: [123.161.74.4] > > is listed in Spamhaus (SPL) and I deep parse headers so I got a hit on this. Unlike PBL and XBL, Spamhaus SBL is safe for deep-parsing. Which SA does for this par

Re: url spam from Hotmail

2010-05-26 Thread Ned Slider
On 05/26/2010 09:33 PM, Lennart Johansson wrote: My first post, please don't kill me for doing some things wrong. I see quite a few of these from hotmail orginating from China. http://pastebin.com/q308E7ZG SA score: Score Matching Rule Descriptioncached not result=

Re: Spam coming from hotmail.

2009-11-09 Thread Benny Pedersen
On man 09 nov 2009 13:56:27 CET, "Casartello, Thomas" wrote Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign up now. why not enable it ? but for others: give a big spam score for rfc-i give a big ham score for users at hotmail that does not spam you meta

Re: Spam coming from hotmail.

2009-11-09 Thread rich...@buzzhost.co.uk
27;m getting confused as to if I can do this with SA - I think I'm clear that the Relay Countries won't look at this kind of header(?), and that checking them against blocklists is not appropriate as by nature they will probably be in the PBL. But is there a way to grab these by geographi

Re: [SPAM:6.0] Spam coming from hotmail.

2009-11-09 Thread RW
On Mon, 09 Nov 2009 15:09:18 + "rich...@buzzhost.co.uk" wrote: > > Running those through my SA gets the biggest hit for the second > example with the Indian link in the body. But that's a custom rule > kindly given to me by of one of the good people on this list. > > I'm more concerned with

RE: [SPAM:6.0] Spam coming from hotmail.

2009-11-09 Thread Casartello, Thomas
To: users@spamassassin.apache.org Subject: Re: [SPAM:6.0] Spam coming from hotmail. On 09.11.09 09:20, Casartello, Thomas wrote: > Yeah I should have attached those instead of copying and pasting the > Outlook crap. Was pretty stupid, my apologies. no, you should have publiched them somewhere and paste a li

RE: [SPAM:6.0] Spam coming from hotmail.

2009-11-09 Thread rich...@buzzhost.co.uk
Running those through my SA gets the biggest hit for the second example with the Indian link in the body. But that's a custom rule kindly given to me by of one of the good people on this list. I'm more concerned with this: X-Originating-IP: [189.69.146.53] In Brazil yet my relay module does not

Re: [SPAM:6.0] Spam coming from hotmail.

2009-11-09 Thread Matus UHLAR - fantomas
ailing list recommends that. btw, it was this advertising signature what made him laugh: > > ______ > > Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign > > up now. -- Matus UHLAR - fanto

RE: [SPAM:6.0] Spam coming from hotmail.

2009-11-09 Thread Casartello, Thomas
- From: Casartello, Thomas Sent: Monday, November 09, 2009 9:20 AM To: 'rich...@buzzhost.co.uk' Cc: Spamassassin Mailing List Subject: RE: [SPAM:6.0] Spam coming from hotmail. Yeah I should have attached those instead of copying and pasting the Outlook crap. Was pretty stupid, my apologies.

RE: [SPAM:6.0] Spam coming from hotmail.

2009-11-09 Thread Casartello, Thomas
) -Original Message- From: rich...@buzzhost.co.uk [mailto:rich...@buzzhost.co.uk] Sent: Monday, November 09, 2009 8:47 AM Cc: Spamassassin Mailing List Subject: Re: [SPAM:6.0] Spam coming from hotmail. On Mon, 2009-11-09 at 07:56 -0500, Casartello, Thomas wrote: > I’ve been getting a lot of

  1   2   3   >