Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On Thu, 2 May 2019 20:42:54 + David Jones wrote: > On 5/2/19 3:11 PM, RW wrote: > > > > The Invaluement lists are marketed as low-FP. There's a huge > > difference between being good enough to stay out of Invaluement and > > being good enough for whitelisting at the -15 point level. > > D

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On 5/2/19 3:11 PM, RW wrote: > > That just means it's a known source of email and not a zombie or IP > address controlled by an outright spammer. The level of trust is > described as 'none', that's a lower level than some freemail servers. > > The DKIM signing domain isn't listed at all on dkimw

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On Thu, 2 May 2019 03:15:13 + David Jones wrote: > On 5/1/19 6:04 PM, RW wrote: > > On Wed, 1 May 2019 10:39:08 -0700 (MST) > > jandev wrote: > > > >> David, > >> > >> I tried to send the original email to the email address you > >> requested. But your mail hoster blocks (554 5.7.1) my TLDs

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On 5/1/19 10:15 PM, David Jones wrote: > On 5/1/19 6:04 PM, RW wrote: >> On Wed, 1 May 2019 10:39:08 -0700 (MST) >> jandev wrote: >> >>> David, >>> >>> I tried to send the original email to the email address you >>> requested. But your mail hoster blocks (554 5.7.1) my TLDs. >> >> I doesn't really

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On 5/1/19 6:04 PM, RW wrote: > On Wed, 1 May 2019 10:39:08 -0700 (MST) > jandev wrote: > >> David, >> >> I tried to send the original email to the email address you >> requested. But your mail hoster blocks (554 5.7.1) my TLDs. > > I doesn't really matter, you posted a link to pastebin on the lis

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On Wed, 1 May 2019 10:39:08 -0700 (MST) jandev wrote: > David, > > I tried to send the original email to the email address you > requested. But your mail hoster blocks (554 5.7.1) my TLDs. I doesn't really matter, you posted a link to pastebin on the list. It passed SPF with the envelope doma

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

David, I tried to send the original email to the email address you requested. But your mail hoster blocks (554 5.7.1) my TLDs. And an email to your postmaster to activate my TLD/domain has never been replied. Regards Jan -- Sent from: http://spamassassin.1065346.n5.nabble.com/SpamAssassin-Use

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

@lbutlr wrote > Is there a reason you didn't disclose the IP address? That domain is NOT > listed in the current 60_whitelist_spf.cf Sorry, header excerpt got cut-off by nabble: List-Unsubscribe: X-Warn

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

Hi David Thanks a lot for your reply. Please find the redacted headers of the message mentioned above: https://pastebin.com/sjix9CDp (sorry, nabble removed the headers in the initial post) Cheers Jan -- Sent from: http://spamassassin.1065346.n5.nabble.com/SpamAssassin-Users-f3.html

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On 4/17/19 4:16 PM, jandev wrote: > Hi all > > Yesterday our mail server received unwanted email from simpliv.com. It was > valid DKIM signed for mail.simpliv.com > Despite the sender ip was listed at Sorbs the email even passed the bayesian > filter: > > > Surprisingly the ip/domain is part o

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On 17 Apr 2019, at 15:16, jandev wrote: > Surprisingly the ip/domain is part of a SA shipped white list: Rule > USER_IN_DEF_SPF_WL gave it -7.5! Is there a reason you didn't disclose the IP address? That domain is NOT listed in the current 60_whitelist_spf.cf It IS listed in 60_whitelist_auth.c

Re: Spammer in white list aka USER_IN_DEF_SPF_WL

On Wed, 17 Apr 2019 14:16:30 -0700 (MST) jandev wrote: > Hi all > > Yesterday our mail server received unwanted email from simpliv.com. > ... > Surprisingly the ip/domain is part of a SA shipped white list: Rule > USER_IN_DEF_SPF_WL gave it -7.5! I was going to suggest you unwhitelist it yoursel

Spammer in white list aka USER_IN_DEF_SPF_WL

Hi all Yesterday our mail server received unwanted email from simpliv.com. It was valid DKIM signed for mail.simpliv.com Despite the sender ip was listed at Sorbs the email even passed the bayesian filter: Surprisingly the ip/domain is part of a SA shipped white list: Rule USER_IN_DEF_SPF_WL ga