Re: Whitelisting Sprint with no domain security

2017-12-07 Thread RW
On Wed, 6 Dec 2017 18:03:00 -0800 (PST) John Hardin wrote: > On Wed, 6 Dec 2017, Alex wrote: > > > John wrote: > >> It's TVD_SPACE_RATIO plus some exclusions of hits on hammy rules. > > > > My point was, does it make sense for this rule to apply to an email > > with just an image attachment?

Re: Whitelisting Sprint with no domain security

2017-12-07 Thread Alex
Hi, >>> I shouldn't as your entry was: >>> >>> whitelist_from_rcvd *@pm.sprintpcs.com sprintpcs.com >>> >>> when the sprint addresses are on pm.sprint.com - i.e. without the 'pcs'. >> >> >> My apologies; I typed this from memory. The whitelist entry is correct > > > what about compose *one* mail w

Re: Whitelisting Sprint with no domain security

2017-12-07 Thread Alex
Hi, >> >> https://pastebin.com/cYtygBY9 >> >> >> >> I've tried: >> >> >> >> whitelist_from_rcvd *@pm.sprintpcs.com sprintpcs.com >> >> >> >> Ideas greatly appreciated. >> > >> > >> > Try to capture an example message as close to the version that gets >> > fed to your SA as you can. (Your pastebin

Re: Whitelisting Sprint with no domain security

2017-12-07 Thread RW
On Wed, 6 Dec 2017 20:51:32 -0500 Alex wrote: > Hi, > > >> What is TVD_SPACE_RATIO_MINFP? That appears to be a complex rule, > >> but adds 2.5 points to a basic email with just an image attachment. > >> > >> https://pastebin.com/cYtygBY9 > >> > >> I've tried: > >> > >> whitelist_from_rcvd *@pm.sp

Re: Whitelisting Sprint with no domain security

2017-12-06 Thread John Hardin
On Wed, 6 Dec 2017, Alex wrote: John wrote: What is TVD_SPACE_RATIO_MINFP? That appears to be a complex rule, but adds 2.5 points to a basic email with just an image attachment. It's TVD_SPACE_RATIO plus some exclusions of hits on hammy rules. My point was, does it make sense for this rul

Re: Whitelisting Sprint with no domain security

2017-12-06 Thread Alex
Hi, >> What is TVD_SPACE_RATIO_MINFP? That appears to be a complex rule, but >> adds 2.5 points to a basic email with just an image attachment. >> >> https://pastebin.com/cYtygBY9 >> >> I've tried: >> >> whitelist_from_rcvd *@pm.sprintpcs.com sprintpcs.com >> >> Ideas greatly appreciated. > > > Tr

Re: Whitelisting Sprint with no domain security

2017-12-06 Thread John Hardin
On Wed, 6 Dec 2017, Alex wrote: What is TVD_SPACE_RATIO_MINFP? That appears to be a complex rule, but adds 2.5 points to a basic email with just an image attachment. It's TVD_SPACE_RATIO plus some exclusions of hits on hammy rules. -- John Hardin KA7OHZhttp://www.impsec.o

Re: Whitelisting Sprint with no domain security

2017-12-06 Thread David B Funk
On Wed, 6 Dec 2017, Alex wrote: Hi, sprintpcs.com has no domain security and for some reason I can't whitelist them using whitelist_from_rcvd, or even whitelist_from just to make it even more simple. Can someone help me figure out what I'm doing wrong? Ideally I'd like to avoid whitelisting th

Whitelisting Sprint with no domain security

2017-12-06 Thread Alex
Hi, sprintpcs.com has no domain security and for some reason I can't whitelist them using whitelist_from_rcvd, or even whitelist_from just to make it even more simple. Can someone help me figure out what I'm doing wrong? Ideally I'd like to avoid whitelisting them, but many people using their cel