Re: From Spoofed

2020-03-02 Thread @lbutlr
On 02 Mar 2020, at 09:32, Robert A. Ober wrote: > On 2/26/20 9:54 AM, Bill Cole wrote: >> >> Which puts you in the top 99.999th percentile of email server skills >> worldwide! > Ha, I hope that's wrong:-) I’m sure it is, it’s more like 99.999% Do we think there are 80,000 people in the world

Re: From Spoofed

2020-03-02 Thread Robert A. Ober
On 2/26/20 9:54 AM, Bill Cole wrote: On 26 Feb 2020, at 10:16, Robert A. Ober wrote:  don't participate because I'm just good enough to maintain my customers email servers, Which puts you in the top 99.999th percentile of email server skills worldwide! –– Ha, 

Re: From Spoofed

2020-02-27 Thread Bill Cole
On 27 Feb 2020, at 8:12, RW wrote: > On Tue, 25 Feb 2020 22:43:04 -0500 > Bill Cole wrote: > >> On 25 Feb 2020, at 20:28, Robert A. Ober wrote: >> >>>     Hey Folks, >>> >>> I have a user that is getting many emails with obscene subjects. >>> Someone is spoofing the From to include the users domai

Re: From Spoofed

2020-02-27 Thread RW
On Tue, 25 Feb 2020 22:43:04 -0500 Bill Cole wrote: > On 25 Feb 2020, at 20:28, Robert A. Ober wrote: > > >     Hey Folks, > > > > I have a user that is getting many emails with obscene subjects. > > Someone is spoofing the From to include the users domain so the > > email is hitting "USER_IN_WH

Re: From Spoofed

2020-02-26 Thread Bill Cole
On 26 Feb 2020, at 10:16, Robert A. Ober wrote: don't participate because I'm just good enough to maintain my customers email servers, Which puts you in the top 99.999th percentile of email server skills worldwide! -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and

Fwd: Re: From Spoofed

2020-02-26 Thread Robert A. Ober
l have some fun, Robert Forwarded Message Subject: Re: From Spoofed Date: Wed, 26 Feb 2020 08:34:16 -0600 From: Robert A. Ober To: David B Funk On 2/25/20 9:04 PM, David B Funk wrote: On Wed, 26 Feb 2020, Benny Pedersen wrote: Robert A. Ober skrev den 2020-02-26

Re: From Spoofed

2020-02-26 Thread Brent Clark
Quite an overhead you are suggesting / proposing there, dont you think? All the OP needs to do is, first and foremost, sort out that USER_IN_WHITELIST. Then I recommend throwing in KAM rules and extremeshoks fromreplyto plugin. And if the OP is really serious, enable Sane security signatures.

RE: From Spoofed

2020-02-26 Thread Marc Roos
You should maintain also your own rbl with soft and hard blocking of ip ranges. Problem with only marking emails is, is that the spam network is not 'learning' that their emails are being blocked. -Original Message- To: users@spamassassin.apache.org Subject: From Spoofed Hey F

Re: From Spoofed

2020-02-25 Thread Bill Cole
On 25 Feb 2020, at 20:28, Robert A. Ober wrote:     Hey Folks, I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST".  I have installed the plugins from extremeshok and it has not

Re: From Spoofed

2020-02-25 Thread John Hardin
On Tue, 25 Feb 2020, Robert A. Ober wrote: I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST". Does the user's domain have either SPF or DKIM enabled so that the mail can be mor

Re: From Spoofed

2020-02-25 Thread David B Funk
On Wed, 26 Feb 2020, Benny Pedersen wrote: Robert A. Ober skrev den 2020-02-26 02:28: I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST". I have installed the plugins from extrem

Re: From Spoofed

2020-02-25 Thread Benny Pedersen
Robert A. Ober skrev den 2020-02-26 02:28: I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST". I have installed the plugins from extremeshok and it has not stopped the problem. r