Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-27 Thread Vincent Lefevre
On 2025-05-08 09:44:18 -0400, Bill Cole wrote: > That is absolutely true but it is not *for me* a sufficient reason to remove > a longstanding rule. I would need to be convinced that the marginal > improvements in noise and privacy for most users greatly outweighs the risk > that removing the rules

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-27 Thread Bill Cole
On 2025-05-27 at 09:54:38 UTC-0400 (Tue, 27 May 2025 15:54:38 +0200) Vincent Lefevre is rumored to have said: On 2025-05-08 09:44:18 -0400, Bill Cole wrote: That is absolutely true but it is not *for me* a sufficient reason to remove a longstanding rule. I would need to be convinced that the

Re: rep.mailspike.net

2025-05-21 Thread Bill Cole
Please keep replies on the list... On 2025-05-21 at 14:16:09 UTC-0400 (Wed, 21 May 2025 18:16:09 +) Rupert Gallagher is rumored to have said: >> rep.mailspike.net is not even supposed to be a nameserver. I don't see why >> you think it should have an A record > > NXDOMAIN is the legitimate

Re: rep.mailspike.net

2025-05-21 Thread Bill Cole
On 2025-05-20 at 11:32:26 UTC-0400 (Tue, 20 May 2025 15:32:26 +) Rupert Gallagher is rumored to have said: Hello,  Is rep.mailspike.net working for you? If I query 78.153.140.99 at https://mailspike.io/ip_verify I get 127.0.0.11, however if I query using dig I get no answer at all, and

Re: rep.mailspike.net

2025-05-21 Thread Bill Cole
On 2025-05-20 at 14:38:40 UTC-0400 (Tue, 20 May 2025 18:38:40 +) Rupert Gallagher is rumored to have said: I wonder how it works for real, since mailspike.net itself fails DNS resolution. Not so. $ dig mailspike.net NS ; <<>> DiG 9.10.6 <<>> mailspike.net NS ;; g

Re: rep.mailspike.net

2025-05-20 Thread Tom Hendrikx
Hi, dig -t A 99.140.153.78.rep.mailspike.net This results in NXDMAIN, indicating that there is no current listing for the ip address. There is no requirement in DNS that says that 'rep.mailspike.net' should be resolvable. The mailspike nameservers are at: dig -t NS mailspike.net As to why

Re: rep.mailspike.net

2025-05-20 Thread Andrew C Aitchison
On Tue, 20 May 2025, Rupert Gallagher wrote: Is rep.mailspike.net working for you? If I query 78.153.140.99 at https://mailspike.io/ip_verify I get 127.0.0.11, however if I query using dig I get no answer at all, and the name server itself does not exist. dig +short -t A 99.140.153.78.rep.m

Re: rep.mailspike.net

2025-05-20 Thread Rupert Gallagher
I wonder how it works for real, since mailspike.net itself fails DNS resolution. On Tuesday, May 20th, 2025 at 6:57 PM, Reindl Harald (privat) wrote: > > > suree, but nobody is using "rep.mailspike.net" since MSPIKE is part of > the default rules > > header __RCVD_IN_MSPIKE_B eval:check_rb

Re: rep.mailspike.net

2025-05-20 Thread Rupert Gallagher
I assume some of you is using it. https://cwiki.apache.org/confluence/display/spamassassin/DnsBlocklists#dnsbl-block On Tuesday, May 20th, 2025 at 5:32 PM, Rupert Gallagher wrote: > > > Hello, > > Is rep.mailspike.net working for you? > > If I query 78.153.140.99 at https://mailspike.io

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-12 Thread Bill Cole
On 2025-05-12 at 14:20:02 UTC-0400 (Mon, 12 May 2025 19:20:02 +0100) Nix is rumored to have said: > On 1 May 2025, Bill Cole told this: > >> On 2025-05-01 at 16:03:21 UTC-0400 (Thu, 01 May 2025 20:03:21 +) >> Michael Grant via users >> is rumored to have said: >> >>> I'm seeing this error ov

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-12 Thread Nix
On 1 May 2025, Bill Cole told this: > On 2025-05-01 at 16:03:21 UTC-0400 (Thu, 01 May 2025 20:03:21 +) > Michael Grant via users > is rumored to have said: > >> I'm seeing this error over and over in my logs over the last few weeks: >> >> spamd: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLO

Re: More Sendgrid trouble?

2025-05-10 Thread Matija Nalis
On Fri, May 09, 2025 at 02:15:15PM -0700, jdow wrote: > On 20250509 06:14:59, Matija Nalis wrote: > > While I'm not familiar with RBBS specifically, other BBS software I > > used (like PCBoard) did guarantee message delivery. Only way a > > Or the recipient could never get around to reading it. O

Re: Cold emails are not considered spam?

2025-05-09 Thread Bill Cole
On 2025-05-09 at 13:21:41 UTC-0400 (Fri, 9 May 2025 13:21:41 -0400) Karl Denninger is rumored to have said: > Bayes seems to get them most of the time, if you train it well. As more and > more of this is AI-generated the "catch" rate goes up incidentally, as AI is, > well, certainly artificial

Re: Cold emails are not considered spam?

2025-05-09 Thread Bill Cole
On 2025-05-09 at 13:10:21 UTC-0400 (Fri, 9 May 2025 13:10:21 -0400) Mark London is rumored to have said: Hi - Our site has recently been getting lots of "cold emails". You have my sympathy. I've read according to a Google search, they aren't considered "spam".  You can get a Google search

Re: More Sendgrid trouble?

2025-05-09 Thread jdow
On 20250509 06:14:59, Matija Nalis wrote: On Fri, May 09, 2025 at 03:32:58AM -0700, jdow wrote: On 20250509 02:46:14, Matija Nalis wrote: Not only did people fully expect that e-mail they sent would be delivered, they would expected it would be delivered promptly. If it even got delayed by fe

Re: Cold emails are not considered spam?

2025-05-09 Thread Anne P. Mitchell, Esq.
On 5/9/2025 13:10, Mark London wrote: > Hi - Our site has recently been getting lots of "cold emails". I've read > according to a Google search, they aren't considered "spam". And websites > provide instructions and templates for people, on how to send cold emails. > Or there are web sites

Re: Cold emails are not considered spam?

2025-05-09 Thread Karl Denninger
On 5/9/2025 13:10, Mark London wrote: Hi - Our site has recently been getting lots of "cold emails". I've read according to a Google search, they aren't considered "spam". And websites provide instructions and templates for people, on how to send cold emails.  Or there are web sites that prove

Re: More Sendgrid trouble?

2025-05-09 Thread Matus UHLAR - fantomas
>> Yeah, at this point, if I get anything from Outlook, Yahoo, Google, >> Mailchimp, Mailgun, OVH, or Sendgrid and it’s not a explicitly a >> whitelisted entry, I bounce it. > >I used a greylist where emails get a 4xx message with a link that allows the email through ... Why would a mail system t

Re: More Sendgrid trouble?

2025-05-09 Thread Vincent Lefevre
On 2025-05-09 11:46:14 +0200, Matija Nalis wrote: > Today, if the e-mail you're sending is important, you'll follow it up > with IM or voice call to verify if it has reached the recipient. No, at least for me, there is too much mail that is regarded as important, and it would be a waste of time. F

Re: More Sendgrid trouble?

2025-05-09 Thread Matija Nalis
On Fri, May 09, 2025 at 03:32:58AM -0700, jdow wrote: > On 20250509 02:46:14, Matija Nalis wrote: > > Not only did people fully expect that e-mail they sent would be > > delivered, they would expected it would be delivered promptly. > > > > If it even got delayed by few hours, that was considered

RE: More Sendgrid trouble?

2025-05-09 Thread Marc
> >> Yeah, at this point, if I get anything from Outlook, Yahoo, Google, > >> Mailchimp, Mailgun, OVH, or Sendgrid and it’s not a explicitly a > >> whitelisted entry, I bounce it. > > > >I used a greylist where emails get a 4xx message with a link that > allows the email through ... > > Why would

Re: More Sendgrid trouble?

2025-05-09 Thread jdow
On 20250509 02:46:14, Matija Nalis wrote: On Thu, May 08, 2025 at 05:22:32PM -0400, John Levine wrote: It appears that Marc said: Yeah, at this point, if I get anything from Outlook, Yahoo, Google, Mailchimp, Mailgun, OVH, or Sendgrid and it’s not a explicitly a whitelisted entry, I bounce it.

Re: More Sendgrid trouble?

2025-05-09 Thread Matija Nalis
On Thu, May 08, 2025 at 05:22:32PM -0400, John Levine wrote: > It appears that Marc said: > >> Yeah, at this point, if I get anything from Outlook, Yahoo, Google, > >> Mailchimp, Mailgun, OVH, or Sendgrid and it’s not a explicitly a > >> whitelisted entry, I bounce it. > > > >I used a greylist whe

Re: More Sendgrid trouble?

2025-05-08 Thread John Levine
It appears that Marc said: >> Yeah, at this point, if I get anything from Outlook, Yahoo, Google, >> Mailchimp, Mailgun, OVH, or Sendgrid and it’s not a explicitly a >> whitelisted entry, I bounce it. > >I used a greylist where emails get a 4xx message with a link that allows the >email through .

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-08 Thread Bill Cole
On 2025-05-07 at 11:19:47 UTC-0400 (Wed, 07 May 2025 11:19:47 -0400) Greg Troxel is rumored to have said: Bill Cole writes: 1> On 2025-05-06 at 12:33:00 UTC-0400 (Tue, 06 May 2025 12:33:00 -0400) Greg Troxel is rumored to have said: [...] I think we have arrived at it being time to just d

Re: More Sendgrid trouble?

2025-05-08 Thread Andrew C Aitchison
On Thu, 8 May 2025, Michael Orlitzky wrote: On 2025-05-08 08:11:18, Marc wrote: I used a greylist where emails get a 4xx message with a link that allows the email through so 'regular' users can get past it. Problem is, these fucked up networks are not even notifying users about 5xx and 4xx not

Re: More Sendgrid trouble?

2025-05-08 Thread Michael Orlitzky
On 2025-05-08 08:11:18, Marc wrote: > > I used a greylist where emails get a 4xx message with a link that > allows the email through so 'regular' users can get past it. Problem > is, these fucked up networks are not even notifying users about 5xx > and 4xx notifications. With sendgrid, it depends

RE: More Sendgrid trouble?

2025-05-08 Thread Marc
> > > > > On Sep 29, 2022, at 11:26 AM, Greg Troxel wrote: > > > > > > Kris Deugau writes: > > > >> The Bayes result is not great, but the USER_IN_DEF_*_WL hits between > >> them account for most of that negative score anyway. > > > > With dkim-signed spam, I think the only two paths forward a

Re: More Sendgrid trouble?

2025-05-07 Thread Philip Prindeville via users
> On Sep 29, 2022, at 11:26 AM, Greg Troxel wrote: > > > Kris Deugau writes: > >> The Bayes result is not great, but the USER_IN_DEF_*_WL hits between >> them account for most of that negative score anyway. > > With dkim-signed spam, I think the only two paths forward are: > - hope they f

Re: spamhaus fp

2025-05-07 Thread Matus UHLAR - fantomas
On 07.05.25 16:44, Benny Pedersen via users wrote: Subject: spamhaus fp Yes, score=5.513 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FILL_THIS_FORM_SHORT=1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=

Re: spamhaus fp

2025-05-07 Thread Matija Nalis
On Wed, May 07, 2025 at 06:02:38PM +0200, Benny Pedersen via users wrote: > Received: from bid47go.5652833t.service.spamhaus.com > > in dns > > bid47go.5652833t.service.spamhaus.com TXT "v=spf1 a -all" > > solved if spamhaus listen here So, your intention was to report SPF misconfiguration issu

Re: spamhaus fp

2025-05-07 Thread Benny Pedersen via users
Matija Nalis skrev den 2025-05-07 17:21: On Wed, May 07, 2025 at 04:44:18PM +0200, Benny Pedersen via users wrote: Yes, score=5.513 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FILL_THIS_FORM_SHORT=1, HTML_FONT_LOW_CONTRAST=0.001,

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-07 Thread Matija Nalis
On Tue, May 06, 2025 at 12:52:11PM -0400, Bill Cole wrote: > In what way it is harmful for those rules to be left in place, given that SA > disables 'blocked' DNSBL servers when it encounters them. well, for one, it needlessly wastes postmaster's time analyzing and trying to troubleshoot them for

Re: spamhaus fp

2025-05-07 Thread Matija Nalis
On Wed, May 07, 2025 at 04:44:18PM +0200, Benny Pedersen via users wrote: > Yes, score=5.513 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, > DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, > FILL_THIS_FORM_SHORT=1, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, > HTTPS_HTTP_MISMA

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-07 Thread Greg Troxel
Bill Cole writes: 1> On 2025-05-06 at 12:33:00 UTC-0400 (Tue, 06 May 2025 12:33:00 -0400) > Greg Troxel > is rumored to have said: > [...] >> I think we have arrived at it being time to just drop all VALIDITY >> rules >> from the default rulset. Even if people using them in meta rules have >> t

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-06 Thread Bill Cole
On 2025-05-06 at 12:33:00 UTC-0400 (Tue, 06 May 2025 12:33:00 -0400) Greg Troxel is rumored to have said: [...] I think we have arrived at it being time to just drop all VALIDITY rules from the default rulset. Even if people using them in meta rules have to adjust (or add them back as local co

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-05-06 Thread Greg Troxel
On April 5, I wrote: > I'd like to ask Andrew to adjust the Validity website to provide an > easy to find, clear explanation of the semantics of the RBLs. I went > to the URL in the config file and just got marketing text. > > I'd like Andrew to explain if there is (still) any point to SA

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-03 Thread Bill Cole
On 2025-05-02 at 08:39:19 UTC-0400 (Fri, 02 May 2025 08:39:19 -0400) Bill Cole is rumored to have said: > If your resolver is blocked, it is blocked everyone. Sorry: missing the word 'for' there before 'everyone'. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo@toad

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-02 Thread Benny Pedersen via users
Benny Pedersen via users skrev den 2025-05-02 16:08: Michael Grant via users skrev den 2025-05-02 13:41: From "Bill Cole" Did you do that in the "global" config at /etc/mail/spamassassin/local.cf (or something like it with 'etc' somewhere) or in root's user config in /root/.spamassassin/{us

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-02 Thread Benny Pedersen via users
Michael Grant via users skrev den 2025-05-02 13:41: From "Bill Cole" Did you do that in the "global" config at /etc/mail/spamassassin/local.cf (or something like it with 'etc' somewhere) or in root's user config in /root/.spamassassin/{userprefs,local.cf,whatever} ? If it was the latter, yo

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-02 Thread Bill Cole
On 2025-05-02 at 07:41:46 UTC-0400 (Fri, 02 May 2025 11:41:46 +) Michael Grant via users is rumored to have said: From "Bill Cole" Did you do that in the "global" config at /etc/mail/spamassassin/local.cf (or something like it with 'etc' somewhere) or in root's user config in /root/.sp

Re[2]: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-02 Thread Michael Grant via users
From "Bill Cole" Did you do that in the "global" config at /etc/mail/spamassassin/local.cf (or something like it with 'etc' somewhere) or in root's user config in /root/.spamassassin/{userprefs,local.cf,whatever} ? If it was the latter, you need to move it to the global config. I put it i

Re: RCVD_IN_VALIDITY_RPBL_BLOCKED

2025-05-01 Thread Bill Cole
On 2025-05-01 at 16:03:21 UTC-0400 (Thu, 01 May 2025 20:03:21 +) Michael Grant via users is rumored to have said: I'm seeing this error over and over in my logs over the last few weeks: spamd: check: dns_block_rule RCVD_IN_VALIDITY_RPBL_BLOCKED hit, creating /root/.spamassassin/dnsblock_

RE: disable spamhaus request

2025-04-28 Thread DEMBLANS Mathieu
an decrease the number of requests (divided by 2 at least). I will see at the end if we can respect the 10 requests by day. -Message d'origine- De : Bowie Bailey Envoyé : vendredi 18 avril 2025 15:40 À : users@spamassassin.apache.org Objet : Re: disable spamhaus request

Re: undeliverable tagged incorrectly

2025-04-21 Thread Matus UHLAR - fantomas
rOn 20.04.25 15:44, Alex wrote: I have spamassassin-4 with amavisd set up and have a message that hit mailspike and a few others that pushed it over my 5 point threshold. Can someone help me understand why this was not properly identified as a bounce message? https://pastebin.com/mc4zgp7S Usual

Re: disable spamhaus request

2025-04-18 Thread Bill Cole
On 2025-04-18 at 09:40:29 UTC-0400 (Fri, 18 Apr 2025 09:40:29 -0400) Bowie Bailey is rumored to have said: [...] > With that being said, he was not incorrect in this instance. > > The response received from Spamhaus indicates that you were blocked due to > using a public DNS server. > > describe

Re: disable spamhaus request

2025-04-18 Thread Matus UHLAR - fantomas
On 17.04.25 15:47, DEMBLANS Mathieu wrote: Thanks for the link, I will study that. Our local nameserver DOESN’T USE shared/open nameservers, it transmit to the good nameservers (for spamhaus, their NS). do you mean that your nameservers do iterative resolution or you have configured forwardin

Re: disable spamhaus request

2025-04-18 Thread Bill Cole
On 2025-04-17 at 23:30:07 UTC-0400 (Fri, 18 Apr 2025 05:30:07 +0200) Benny Pedersen via users is rumored to have said: > Andrew C Aitchison skrev den 2025-04-17 22:40: > >> I'll just repeat the words that Bill Cole sent last week >> ( https://marc.info/?l=spamassassin-users&m=174413206312855&w=2

Re: disable spamhaus request

2025-04-18 Thread Bowie Bailey
On 4/17/2025 4:40 PM, Andrew C Aitchison wrote: On Thu, 17 Apr 2025, DEMBLANS Mathieu wrote: Thanks for the link, I will study that. Our local nameserver DOESN’T USE shared/open nameservers, it transmit to the good nameservers (for spamhaus, their NS). Why being so aggressive in your respons

Re: disable spamhaus request

2025-04-17 Thread Benny Pedersen via users
Andrew C Aitchison skrev den 2025-04-17 22:40: I'll just repeat the words that Bill Cole sent last week ( https://marc.info/?l=spamassassin-users&m=174413206312855&w=2 ): Please note that "Reindl Harald " has a bad habit of writing pointlessly confrontational, intentionally rude, and very oft

RE: disable spamhaus request

2025-04-17 Thread Andrew C Aitchison
On Thu, 17 Apr 2025, DEMBLANS Mathieu wrote: Thanks for the link, I will study that. Our local nameserver DOESN’T USE shared/open nameservers, it transmit to the good nameservers (for spamhaus, their NS). Why being so aggressive in your response ? You probably have a incredibly knowledge you h

RE: disable spamhaus request

2025-04-17 Thread DEMBLANS Mathieu
. Instead of that have constructive responses. Clear informations are sometimes hard to find. If you don’t wan to help, don’t respond. De : Reindl Harald Envoyé : jeudi 17 avril 2025 17:16 À : DEMBLANS Mathieu Objet : Re: disable spamhaus request and frankly: when you outright block based on

Re: disable spamhaus request

2025-04-17 Thread Bill Cole
On 2025-04-16 at 05:00:37 UTC-0400 (Wed, 16 Apr 2025 11:00:37 +0200) Axb is rumored to have said: On 16.04.2025 10:18, DEMBLANS Mathieu wrote: Hello everyone, I try to disable the dnsbl request done to spamhaus.org but the solutions I found doesn't work. I put score RCVD_IN_ZEN_BLOCKED_OPEND

Re: disable spamhaus request

2025-04-16 Thread Axb
On 16.04.2025 10:18, DEMBLANS Mathieu wrote: Hello everyone, I try to disable the dnsbl request done to spamhaus.org but the solutions I found doesn't work. I put score RCVD_IN_ZEN_BLOCKED_OPENDNS 0 score RCVD_IN_ZEN_BLOCKED 0 score __RCVD_IN_ZEN 0 in local.cf but spamassassin still do dns requ

Re: Query cname against RBLs

2025-04-15 Thread giovanni
On 4/7/25 12:02 PM, Laurent S. wrote: Dear spamassassin users, I have observed that sometimes spammers register a bunch of throwaways domains (example.xyz), which are all CNAME towards one main domain (example.org). I'd like, with spamassassin, to query those CNAME (for instance that example.org

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-08 Thread Bill Cole
Please note that "Reindl Harald " has a bad habit of writing pointlessly confrontational, intentionally rude, and very often factually false replies to people posting here. That is why you will not find his posts actually allowed on the list (and on some other lists as well.) On 2025-04-08 at

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-08 Thread Anne P. Mitchell, Esq.
> On Apr 8, 2025, at 9:39 AM, Reindl Harald wrote: > >> It IS part of the business model, which is why in more than 20 years we have >> never charged for queries or xfers, and we never will. Even though senders >> pay us, we consider the receivers to be our customers, and our first >> res

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-08 Thread Anne P. Mitchell, Esq.
> > On Apr 4, 2025, at 7:57 PM, Greg Troxel wrote: > > I have no recollection of signing up in any form, and have not gotten an > email asking me to pay. I actually had no idea these were pay/limited > until your mail, as I figured free access to SAFE/CERTIFIED for relying > parties was part of

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-07 Thread Matija Nalis
On Mon, Apr 07, 2025 at 12:39:58PM +0100, Nick Howitt wrote: > > Maybe not a single-person host, but even a small company can cross this > > limit easily. 10k e-mails in 30 days is 333 mails a day, which is quite > > low number. > Divide that by 3 as there are 3 queries per email and the limit is t

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-07 Thread Nick Howitt
On 07/04/2025 12:27, Matus UHLAR - fantomas wrote: "Simon Wilson" writes: My results (about 1800 inbound emails across 6 days) show:   * combination of postscreen and other upstream tests are catching true baddies enough that the VALIDITY_RPBL does not catch any for me   * VALIDITY_SAFE and

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-07 Thread Matus UHLAR - fantomas
"Simon Wilson" writes: My results (about 1800 inbound emails across 6 days) show: * combination of postscreen and other upstream tests are catching true baddies enough that the VALIDITY_RPBL does not catch any for me * VALIDITY_SAFE and VALIDITY_CERTIFIED hit on about 5% of total emails (9

Re: Welcome to the new Chair of SpamAssassin PMC

2025-04-05 Thread Anne P. Mitchell, Esq.
> On Mar 21, 2025, at 5:24 AM, Sidney Markowitz wrote: > > Please join me in welcoming Giovanni Bechis to the role of Chair of the > Apache SpamAssassin Project Management Committee. > > I have retired from the role, and pass the baton to Giovanni, who has been > voted in by PMC and approve

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-05 Thread Greg Troxel
"Simon Wilson" writes: > My results (about 1800 inbound emails across 6 days) show: > * combination of postscreen and other upstream tests are catching true > baddies enough that the VALIDITY_RPBL does not catch any for me > * VALIDITY_SAFE and VALIDITY_CERTIFIED hit on about 5% of total ema

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-05 Thread Simon Wilson via users
Interesting! Thanks Greg. My results (about 1800 inbound emails across 6 days) show: * combination of postscreen and other upstream tests are catching true baddies enough that the VALIDITY_RPBL does not catch any for me * VALIDITY_SAFE and VALIDITY_CERTIFIED hit on about 5% of total emails (96)

Re: Validity (return path blocklist)

2025-04-04 Thread Simon Wilson via users
re.senderscore.com.') describe RCVD_IN_VALIDITY_RPBL   Relay in Validity RPBL, https://senderscore.org/blocklistlookup/ tflags RCVD_IN_VALIDITY_RPBL     net publish reuse RCVD_IN_VALIDITY_RPBL Re your comment: “10K is enough for a home business or small office, and if it's not, they need to

Re: Validity (return path blocklist)

2025-04-04 Thread Noel Butler
On 05/04/2025 01:25, Andrew Fragias via users wrote: Firstly, I wanted to point out that the free service will not be changing and we will be allowing 10,000 Queries within a rolling 30 day window, what will be changing is all those that are excessively exceeding that volume will no longer be

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-04 Thread Greg Troxel
"Simon Wilson via users" writes: > OK, back to the purpose of this list - spamassassin! :) > Validity are planning to enforce limits (although how they will > enforce remains unknown - timeouts? false -ves? false +ves?). Given > that these DNS BLs are in the standard config, and I'm apparently >

Re: Ways to reduce calls to Validity BLs (was Validity (return path blocklist))

2025-04-04 Thread Simon Wilson via users
OK, back to the purpose of this list - spamassassin! :) Validity are planning to enforce limits (although how they will enforce remains unknown - timeouts? false -ves? false +ves?). Given that these DNS BLs are in the standard config, and I'm apparently exceeding the free threshold of 10,000 qu

Re: Validity (return path blocklist)

2025-04-04 Thread Simon Wilson via users
Hi Andrew Thank you, and Tom Bartel (on the mailop list), for replying.  * BTW I've never signed up for anything with Validity other than creating an account at validity.com/zone to validate my IPs (horrible website trying to find that again to check yesterday). * I'm a personal not corporate

Re: Can't figure out how to "aggregate" the spam training for aliased users

2025-04-04 Thread Matus UHLAR - fantomas
wOn 13.03.25 09:34, Karl Denninger wrote: I'm sure this has come up before but I don't see a way to do it in the docs or Wiki. I have a number of "role" accounts that, in some cases, get email from more than one domain.  All are considered "local" by my postfix and dovecot config, thus all th

Re: Log ASN data via default syslog lines

2025-04-02 Thread Tom Hendrikx
Hi, Depending on how you deliver mail after SA has added headers, you might be able to use postfix header checks to log your header,using action INFO or WARN. Something along the likes of: main.cf: header_checks = pcre:/etc/postfix/header_checks header_checks: /^X-Spam-ASN:/ WARN See https

Re: Wrong timestamp added by sendmail in Received: header?

2025-03-24 Thread Bill Cole
On 2025-03-24 at 10:19:40 UTC-0400 (Mon, 24 Mar 2025 15:19:40 +0100) Andreas Haumer is rumored to have said: > Hi! > > Recently I noticed a (at least for me) very strange problem > with a mailserver running sendmail + SpamAssassin: sometimes > (not always!) the Received: header inserted by sendma

Re: Wrong timestamp added by sendmail in Received: header?

2025-03-24 Thread Matus UHLAR - fantomas
On 24.03.25 15:19, Andreas Haumer wrote: Recently I noticed a (at least for me) very strange problem with a mailserver running sendmail + SpamAssassin: sometimes (not always!) the Received: header inserted by sendmail is completely wrong, triggering SpamAssassin rules like "T_DATE_IN_FUTURE_96_Q"

Re: Wrong timestamp added by sendmail in Received: header?

2025-03-24 Thread Andreas Haumer
Hi! Am 24.03.25 um 15:54 schrieb Matus UHLAR - fantomas: On 24.03.25 15:19, Andreas Haumer wrote: Recently I noticed a (at least for me) very strange problem with a mailserver running sendmail + SpamAssassin: sometimes (not always!) the Received: header inserted by sendmail is completely wrong,

Re: Wrong timestamp added by sendmail in Received: header?

2025-03-24 Thread Matus UHLAR - fantomas
On 24.03.25 15:19, Andreas Haumer wrote: Recently I noticed a (at least for me) very strange problem with a mailserver running sendmail + SpamAssassin: sometimes (not always!) the Received: header inserted by sendmail is completely wrong, triggering SpamAssassin rules like "T_DATE_IN_FUTURE_96_Q"

Re: AWL issue

2025-03-24 Thread bOnK
On 24-3-2025 15:38, Matus UHLAR - fantomas wrote: On 24.03.25 09:50, Dudi Goldenberg wrote: Running SA v4.01 on Debian 12.10 with MariaDB backend. The problem that I see is that the AWL table is properly updated with new entries, totscore column is calculated, but msgcount always remains 1 an

Re: AWL issue

2025-03-24 Thread Matus UHLAR - fantomas
On 24.03.25 09:50, Dudi Goldenberg wrote: Running SA v4.01 on Debian 12.10 with MariaDB backend. The problem that I see is that the AWL table is properly updated with new entries, totscore column is calculated, but msgcount always remains 1 and never increments, as well as the lasthit column,

Re: ExtractText and docs?

2025-03-24 Thread giovanni
On 3/23/25 3:40 PM, Matus UHLAR - fantomas wrote: On Sat, Mar 22, 2025 at 07:51:03PM +0100, Matus UHLAR - fantomas wrote: On 20.03.25 13:52, Alex wrote: >I'm using ExtractText to identify QR codes in PDFs. > ># QR-code decoder >extracttext_external    zbar    /usr/bin/zbarimg -q -D {} >e

Re: ExtractText and docs?

2025-03-23 Thread Matus UHLAR - fantomas
On Sat, Mar 22, 2025 at 07:51:03PM +0100, Matus UHLAR - fantomas wrote: On 20.03.25 13:52, Alex wrote: >I'm using ExtractText to identify QR codes in PDFs. > ># QR-code decoder >extracttext_externalzbar/usr/bin/zbarimg -q -D {} >extracttext_use zbar.jpg .png .p

Re: ExtractText and docs?

2025-03-22 Thread Giovanni Bechis
On Sat, Mar 22, 2025 at 07:51:03PM +0100, Matus UHLAR - fantomas wrote: > On 20.03.25 13:52, Alex wrote: > >I'm using ExtractText to identify QR codes in PDFs. > > > ># QR-code decoder > >extracttext_externalzbar/usr/bin/zbarimg -q -D {} > >extracttext_use zbar.j

Re: ExtractText and docs?

2025-03-22 Thread Matus UHLAR - fantomas
On 20.03.25 13:52, Alex wrote: I'm using ExtractText to identify QR codes in PDFs. # QR-code decoder extracttext_externalzbar/usr/bin/zbarimg -q -D {} extracttext_use zbar.jpg .png .pdf .webp image/(?:jpeg|png) application/pdf add_header all

Re: ExtractText and docs?

2025-03-22 Thread giovanni
On 3/20/25 6:52 PM, Alex wrote: Hi, I'm using ExtractText to identify QR codes in PDFs. # QR-code decoder extracttext_external    zbar            /usr/bin/zbarimg -q -D {} extracttext_use         zbar            .jpg .png .pdf .webp image/(?:jpeg|png) application/pdf add_header              al

Re: Welcome to the new Chair of SpamAssassin PMC

2025-03-22 Thread Tom Bartel
Great news, congratulations Giovanni! On Fri, Mar 21, 2025 at 6:48 AM Kevin A. McGrail wrote: > Congrats Giovanni! Thank you for all your service to Sidney. > > > On Fri, Mar 21, 2025, 07:25 Sidney Markowitz wrote: > >> Please join me in welcoming Giovanni Bechis to the role of Chair of the >>

Re: Welcome to the new Chair of SpamAssassin PMC

2025-03-21 Thread Dave Wreski
Congrats, Giovanni! Thanks to you and Sidney for all you do for the community. On 3/21/25 7:24 AM, Sidney Markowitz wrote: Please join me in welcoming Giovanni Bechis to the role of Chair of the Apache SpamAssassin Project Management Committee. I have retired from the role, and pass the baton

Re: Welcome to the new Chair of SpamAssassin PMC

2025-03-21 Thread Thomas Cameron
On 3/21/25 6:24 AM, Sidney Markowitz wrote: Please join me in welcoming Giovanni Bechis to the role of Chair of the Apache SpamAssassin Project Management Committee. I have retired from the role, and pass the baton to Giovanni, who has been voted in by PMC and approved by the ASF Board of Dire

Re: Welcome to the new Chair of SpamAssassin PMC

2025-03-21 Thread Kevin A. McGrail
Congrats Giovanni! Thank you for all your service to Sidney. On Fri, Mar 21, 2025, 07:25 Sidney Markowitz wrote: > Please join me in welcoming Giovanni Bechis to the role of Chair of the > Apache SpamAssassin Project Management Committee. > > I have retired from the role, and pass the baton to

Re: Can't figure out how to "aggregate" the spam training for aliased users

2025-03-15 Thread Karl Denninger
On 3/15/2025 07:48, Matus UHLAR - fantomas wrote: wOn 13.03.25 09:34, Karl Denninger wrote: I'm sure this has come up before but I don't see a way to do it in the docs or Wiki. I have a number of "role" accounts that, in some cases, get email from more than one domain.  All are considered "lo

Re: Can't figure out how to "aggregate" the spam training for aliased users

2025-03-15 Thread Matus UHLAR - fantomas
wOn 13.03.25 09:34, Karl Denninger wrote: I'm sure this has come up before but I don't see a way to do it in the docs or Wiki. I have a number of "role" accounts that, in some cases, get email from more than one domain.  All are considered "local" by my postfix and dovecot config, thus all th

Re: MAILING_LIST_MULTI=-1

2025-03-14 Thread Jared Hall via users
On 3/14/2025 8:27 AM, Matija Nalis wrote: IIRC, having "tflags MAILING_LIST_MULTI nice" adds default negative score automatically. Just like having the rule without "tflags nice" (and whithout explicitly specified "score") adds positive +1 score automatically. That's very "nice" :) Thank you,

Re: MAILING_LIST_MULTI=-1

2025-03-14 Thread Bill Cole
On 2025-03-14 at 02:46:06 UTC-0400 (Fri, 14 Mar 2025 02:46:06 -0400) Jared Hall via users is rumored to have said: SA 3.4.6 I see this negative scoring rule in many spams: MAILING_LIST_MULTI=-1 Spamples appreciated. Seems counter-intuitive but I could not find a score for this rule anywhe

Re: MAILING_LIST_MULTI=-1

2025-03-14 Thread Matija Nalis
On Fri, Mar 14, 2025 at 02:46:06AM -0400, Jared Hall via users wrote: > MAILING_LIST_MULTI=-1 > Seems counter-intuitive but I could not find a score for this rule anywhere. IIRC, having "tflags MAILING_LIST_MULTI nice" adds default negative score automatically. Just like having the rule without "

Re: Deprecated Perl support from Maxmind

2025-03-12 Thread giovanni
On 3/11/25 2:51 PM, Andreas Vögele wrote: Philip Prindeville wrote: What are other people doing now that MaxMind has deprecated Perl support for their databases? I'm the author of IP:Geolocation::MMDB, which is an API-compatible replacement for MaxMind::DB::Reader. Packages are in Fedora, in

Re: Deprecated Perl support from Maxmind

2025-03-12 Thread John Hardin
On Wed, 12 Mar 2025, Bill Cole wrote: On 2025-03-12 at 07:47:34 UTC-0400 (Wed, 12 Mar 2025 12:47:34 +0100) is rumored to have said: I think it would be better to add proper support for IP:Geolocation::MMDB and later deprecate MaxMind::DB::Reader instead. +1 Screwing with the namespace to

Re: Deprecated Perl support from Maxmind

2025-03-12 Thread Bill Cole
On 2025-03-12 at 07:47:34 UTC-0400 (Wed, 12 Mar 2025 12:47:34 +0100) is rumored to have said: > On 3/11/25 2:51 PM, Andreas Vögele wrote: >> Philip Prindeville wrote: >>> What are other people doing now that MaxMind has deprecated Perl support >>> for their databases? >> >> I'm the author of IP

Re: line endings in body tests

2025-03-11 Thread Shawn Iverson
Rainer, Take a look at https://spamassassin.apache.org/full/4.0.x/doc/Mail_SpamAssassin_Conf.html body SYMBOLIC_TEST_NAME /pattern/modifiers ... "All body paragraphs (double-newline-separated blocks text) are turned into a linebreaks-removed, whitespace-normalized, single line. Any lines longer

Re: line endings in body tests

2025-03-11 Thread Bill Cole
On 2025-03-10 at 11:42:16 UTC-0400 (Mon, 10 Mar 2025 16:42:16 +0100) Rainer Sokoll via users is rumored to have said: > Hi, > > SpamAssassin version 4.0.0 > running on Perl version 5.36.0 > > Debian 12 (bookworm) > > I’m pulling my hair out. > A simple mail containing > > --[snip]- > te

Re: Deprecated Perl support from Maxmind

2025-03-11 Thread Matus UHLAR - fantomas
On 3/10/25 8:10 PM, Philip Prindeville via users wrote: What are other people doing now that MaxMind has deprecated Perl support for their databases? On 11.03.25 08:49, giova...@paclan.it wrote: Currently supported Perl modules are "GeoIP2", "Geo::IP", "IP::Country::DB_File" and "IP::Country

Re: The latest fake warning email trying to get you to call a phone number.

2025-03-11 Thread Benny Pedersen
Mark London skrev den 2025-03-11 05:51: Hi - I'm really getting tired of these fake warnings. See below. This one luckily hit spamcop. Otherwise, it would have been delivered. so close your email address so it never will be recived :=) As an aside, see the last line of the email. I am not

Re: Deprecated Perl support from Maxmind

2025-03-11 Thread Andreas Vögele
Philip Prindeville wrote: What are other people doing now that MaxMind has deprecated Perl support for their databases? I'm the author of IP:Geolocation::MMDB, which is an API-compatible replacement for MaxMind::DB::Reader. Packages are in Fedora, in SUSE's devel:languages:perl repository an

Re: Deprecated Perl support from Maxmind

2025-03-11 Thread giovanni
On 3/10/25 8:10 PM, Philip Prindeville via users wrote: What are other people doing now that MaxMind has deprecated Perl support for their databases? Currently supported Perl modules are "GeoIP2", "Geo::IP", "IP::Country::DB_File" and "IP::Country::Fast". Atm I am using IP::Country::DB_File

  1   2   3   4   5   6   7   8   9   10   >