Re: RFE: high, med and low whitelist_from_dkim and whitelist_from_spf

2011-08-01 Thread Ned Slider
On 01/08/11 12:23, Mark Martinec wrote: Ned, On the same basis that some DNSWLs have high, medium and low scores depending upon the level of trust, I'm wondering if it would be useful to have user defined high, medium and low scores available to rules such as whitelist_from_dki

Re: RFE: high, med and low whitelist_from_dkim and whitelist_from_spf

2011-08-01 Thread Mark Martinec
Greg Troxel writes: > > whitelist_from_dkim_low > > whitelist_from_dkim_med > > whitelist_from_dkim_high > > That would be ok, but I'd also like to see > > whitelist_from_dkim_score -2.3 foo.com > > so that white/blacklisting in general could assign arbitrary score > values. I agree, I felt a

Re: RFE: high, med and low whitelist_from_dkim and whitelist_from_spf

2011-08-01 Thread Greg Troxel
Ned Slider writes: > Hi all, > > On the same basis that some DNSWLs have high, medium and low scores > depending upon the level of trust, I'm wondering if it would be useful > to have user defined high, medium and low scores available to rules > such as

Re: RFE: high, med and low whitelist_from_dkim and whitelist_from_spf

2011-08-01 Thread Mark Martinec
Ned, > On the same basis that some DNSWLs have high, medium and low scores > depending upon the level of trust, I'm wondering if it would be useful > to have user defined high, medium and low scores available to rules such > as whitelist_from_dkim and whitelist_from_spf s

Re: RFE: high, med and low whitelist_from_dkim and whitelist_from_spf

2011-07-31 Thread Benny Pedersen
On Sun, 31 Jul 2011 16:41:12 +0100, Ned Slider wrote: whitelist_from_dkim_low if is dkim_valid whitelist_from_dkim_med if is def_whitelist_from_dkim whitelist_from_dkim_high if is whilist_from_dkim why complicate it ?

RFE: high, med and low whitelist_from_dkim and whitelist_from_spf

2011-07-31 Thread Ned Slider
Hi all, On the same basis that some DNSWLs have high, medium and low scores depending upon the level of trust, I'm wondering if it would be useful to have user defined high, medium and low scores available to rules such as whitelist_from_dkim and whitelist_from_spf so mail admins can

Re: whitelist_from_dkim and shortcircuit

2011-07-11 Thread Michael Scheidell
On 7/10/11 5:01 PM, Chris wrote: SPF_PASS,T_DKIM_INVALID,UNPARSEABLE_RELAY shows the dkim signature to be invalid. Is there a reason why that would be? When SA is ran against it a 2nd time then I guess it's failing verification? guess so. you can find out why, and fix it. or, give up and use

Re: whitelist_from_dkim and shortcircuit

2011-07-10 Thread Chris
ur split zone dns has your dkim dns > entries. > > google for dkim test email address's. > make sure there isn't something killing your headers. > > (hint: you cannot whitelist_from_dkim if the dkim signature is invalid!) > > > Michael, when the message or

Re: whitelist_from_dkim and shortcircuit

2011-07-10 Thread Michael Scheidell
make sure there isn't something killing your headers. (hint: you cannot whitelist_from_dkim if the dkim signature is invalid!) -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 >*| *SECNAP Network Security Corporation * Best Mobile Solutions Product of 2011 * Best Intrusi

whitelist_from_dkim and shortcircuit

2011-07-10 Thread Chris
I seem to be having some issues getting this correct in my local.cf file to get shortcircuit working. For instance, adding whitelist_from_dkim *@us.army.mil when SA is ran against a message that I sent myself from work the output is: -2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http

Re: whitelist_from_dkim

2009-09-08 Thread McDonald, Dan
On Tue, 2009-09-08 at 18:24 +0100, Martin Gregorie wrote: > On Tue, 2009-09-08 at 18:54 +0200, Benny Pedersen wrote: > > On Tue 08 Sep 2009 06:25:49 PM CEST, Mark Martinec wrote > > > > > Sure, if you want it to be be whitelisted. > > > > tidy give me 95 warns on the html part :) > > > That's no

Re: whitelist_from_dkim

2009-09-08 Thread Martin Gregorie
On Tue, 2009-09-08 at 18:54 +0200, Benny Pedersen wrote: > On Tue 08 Sep 2009 06:25:49 PM CEST, Mark Martinec wrote > > > Sure, if you want it to be be whitelisted. > > tidy give me 95 warns on the html part :) > That's normal. The HTML generated by word processors, etc is seldom clean but every

Re: whitelist_from_dkim

2009-09-08 Thread Benny Pedersen
On Tue 08 Sep 2009 06:25:49 PM CEST, Mark Martinec wrote Sure, if you want it to be be whitelisted. tidy give me 95 warns on the html part :) In absence of the second parameter, whitelist_from_dkim whitelists only on author signatures. this makes it simple to dump address books from horde

Re: whitelist_from_dkim

2009-09-08 Thread Mark Martinec
..@mcsv129.net, > author keine-antw...@community36.net, > no valid matches > [22718] dbg: dkim: author keine-antw...@community36.net, > not in any dkim whitelist > third party domain need to be whitelisted ? (Mail-DKIM 0.31, sa 3.2.5) Sure, if you want it to be be whitelisted. In

Re: whitelist_from_dkim

2009-09-08 Thread Benny Pedersen
On Tue 08 Sep 2009 10:04:21 AM CEST, Per Jessen wrote Still when it is checked by DIM, it reports "author keine-antw...@community36.net, not in any dkim whitelist". correct it happends here aswell [22718] dbg: dkim: performing public key lookup and signature verification [22718] dbg: dkim: sig

Re: whitelist_from_dkim [solved]

2009-09-08 Thread Per Jessen
Mark Martinec wrote: > Per, > [snip] > whitelist_from_dkim *...@community36.net mcsv129.net > Just to confirm that it works: dkim: author keine-antw...@community36.net, WHITELISTED by whitelist_from_dkim /Per Jessen, Zürich

Re: whitelist_from_dkim

2009-09-08 Thread Per Jessen
Mark Martinec wrote: > Per, > > Without the second argument to whitelist_from_dkim, it checks for > author signatures, as documented. In your case the mail carries a > signature by domain mcsv129.net, so you have a third-party signature > there. > > If you want to whi

Re: whitelist_from_dkim

2009-09-08 Thread Mark Martinec
Per, > >> http://jessen.ch/files/community36.eml > >> whitelist_from_dkim *...@community36.net > >> > >> The actual author is 'keine-antw...@community36.net'; I have run it > >> through SA with debug on and I see it being added to whit

Re: whitelist_from_dkim

2009-09-08 Thread Per Jessen
Matus UHLAR - fantomas wrote: > On 08.09.09 10:04, Per Jessen wrote: >> I still don't seem to be getting more friendly with >> whitelist_from_dkim - >> >> could someone please try feeding this email through your SA setup: >> >> http://jessen.ch/fi

Re: whitelist_from_dkim

2009-09-08 Thread Matus UHLAR - fantomas
On 08.09.09 10:04, Per Jessen wrote: > I still don't seem to be getting more friendly with > whitelist_from_dkim - > > could someone please try feeding this email through your SA setup: > > http://jessen.ch/files/community36.eml > > with this enabled: > > w

whitelist_from_dkim

2009-09-08 Thread Per Jessen
SA list, I still don't seem to be getting more friendly with whitelist_from_dkim - could someone please try feeding this email through your SA setup: http://jessen.ch/files/community36.eml with this enabled: whitelist_from_dkim *...@community36.net The actual author is '

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Benny Pedersen
On Thu, 13 Aug 2009 12:01:09 +0200, Per Jessen wrote: > http://jessen.ch/files/sa-lint-debug.txt old Mail::DKIM (0.32) (0.36 latest) and warn on netset Mail::Domainkeys is not needed, check that you dont load it in pre files -- Benny Pedersen

Re: whitelist_from_dkim not whitelisting ? [SOLVED]

2009-08-13 Thread Per Jessen
Per Jessen wrote: > http://jessen.ch/files/belo-news-dkim-testmsg.output3 > Notice: > > # grep cond_clause.*DKIM /tmp/belo-news-dkim-testmsg.output3 > dbg: cond_clause_plugin_loaded: Mail::SpamAssassin::Plugin::DKIM=1 > dbg: cond_clause_plugin_loaded: Mail::SpamAssassin::Plugin::DKIM=1 > dbg: con

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Per Jessen
Per Jessen wrote: > Per Jessen wrote: > >> One very suspicious line is: >> >> "dkim: no wl entries match author pen...@belo-news.com, no need to >> verify sigs" >> >> Despite my config: >> >> ifplugin Mail::Spamassassin:

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Per Jessen
Per Jessen wrote: > One very suspicious line is: > > "dkim: no wl entries match author pen...@belo-news.com, no need to > verify sigs" > > Despite my config: > > ifplugin Mail::Spamassassin::Plugin::DKIM > whitelist_from_dkim *...@belo-news.com > endif

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Per Jessen
> Just ran a test like that - http://jessen.ch/files/belo-news-dkim-testmsg.output One very suspicious line is: "dkim: no wl entries match author pen...@belo-news.com, no need to verify sigs" Despite my config: ifplugin Mail::Spamassassin::Plugin::DKIM whitelist_from_dkim *...@belo-news.com endif /Per Jessen, Zürich

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Mark Martinec
Per, > The lint test-message presumably wouldn't cause DKIM_VERIFIED to hit > anyway, but DNS is most definitely enabled. Please send the debug output on a real signed message run, e.g.: spamassassin -D -t test.log 2>&1 Mark

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Per Jessen
Mark Martinec wrote: > Per, > >> >> I see DKIM_VERIFIED hit in mails from example.com, but the >> >> whitelisting doesn't happen for some reason. What am I doing >> >> wrong? >> > >> > this should not happend, check spamassassin --lint >> >> Yep, I always do before loading a new ruleset, shows

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Mark Martinec
Per, > >> I see DKIM_VERIFIED hit in mails from example.com, but the > >> whitelisting > >> doesn't happen for some reason. What am I doing wrong? > > > > this should not happend, check spamassassin --lint > > Yep, I always do before loading a new ruleset, shows no problems. > > > output from spa

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Per Jessen
Benny Pedersen wrote: >> I see DKIM_VERIFIED hit in mails from example.com, but the >> whitelisting >> doesn't happen for some reason. What am I doing wrong? > > this should not happend, check spamassassin --lint Yep, I always do before loading a new ruleset, shows no problems. > output from s

Re: whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Benny Pedersen
On Thu, 13 Aug 2009 10:41:51 +0200, Per Jessen wrote: > My ruleset contains lines like this: > > ifplugin Mail::Spamassassin::Plugin::DKIM > whitelist_from_dkim *...@example.com > endif i would use def_whitelist_from_dkim with wildcard user, just me, but imho better

whitelist_from_dkim not whitelisting ?

2009-08-13 Thread Per Jessen
My ruleset contains lines like this: ifplugin Mail::Spamassassin::Plugin::DKIM whitelist_from_dkim *...@example.com endif I see DKIM_VERIFIED hit in mails from example.com, but the whitelisting doesn't happen for some reason. What am I doing wrong? /Per Jessen, Zürich