Re: Way to set user-prefs without a database?

2016-05-19 Thread RW 
On Wed, 18 May 2016 20:06:04 -0700 (PDT)
Dan Mahoney, System Admin wrote:

> Hey there,
> 
> We have a couple of user accounts (really, role aliases) that need a 
> different required_score from our global defaults.  Since they're
> role accounts, they don't have a homedir.  We're using a milter that
> passes the whole username (including domain name) along, anyway.
> 
> Is there a dead-simple way to make this work using only the config
> files, or do I have to go to the trouble of setting up all of mysql
> just to make this happen?

If all you want to do is change the threshold you might be able to get
away with the more_spam_to or use ordinary rules to change the score
per address.

If the rule is marked as noautolearn (or userconf) it wont affect
auto-learning e.g.

tflags USER_IN_MORE_SPAM_TO userconf nice noautolearn

Re: Reporting gmail spam to Google

2016-05-19 Thread Reindl Harald 



Am 19.05.2016 um 17:44 schrieb Joseph Brennan:


Reindl Harald  wrote:


"doing those best" must be the reason for a testing-SPF instead "-all"
come on..



Remember that the DMARC people changed Internet Message Format so that
"From:" no longer shows the person who wrote the message but must "align"
with the mail system that sent the message?


remember all the problems it brings like for mailing-lists as this one?


Well, they also changed the SPF protocol so that -all should not be used.
Using ~all causes processing to continue through DKIM and DMARC, and then
the failure gets reported to the "ruf" address. Using -all is just for
SPF-only people


ah so i need to implement on my side DMARC to give them the benefit of 
DMARC reports while i could with a proper setup JUST REJECT a froged 
message long before SpamAssassin - what a improvement


anyways, your whole DMARC stuff has *nothing* to do with what you 
responded original because it don't and can't change ANYTHING about spam 
from gmail accounts, they pass SPF/DKIM/DMARC


so what do you try to explain me?

scoll up in the thread where you startet to respond about DMARC and then 
try to get the context of the thread - hint: it has NOTHING to do with 
forged mail from whatever servers




signature.asc
Description: OpenPGP digital signature

Re: Reporting gmail spam to Google

2016-05-19 Thread Joseph Brennan 

Reindl Harald  wrote:

> "doing those best" must be the reason for a testing-SPF instead "-all"
> come on..


Remember that the DMARC people changed Internet Message Format so that
"From:" no longer shows the person who wrote the message but must "align"
with the mail system that sent the message?

Well, they also changed the SPF protocol so that -all should not be used.
Using ~all causes processing to continue through DKIM and DMARC, and then
the failure gets reported to the "ruf" address. Using -all is just for
SPF-only people.

Joseph Brennan
Columbia University Information Technology

Re: Way to set user-prefs without a database?

2016-05-19 Thread Kris Deugau 
Dan Mahoney, System Admin wrote:
> Hey there,
> 
> We have a couple of user accounts (really, role aliases) that need a
> different required_score from our global defaults.  Since they're role
> accounts, they don't have a homedir.  We're using a milter that passes
> the whole username (including domain name) along, anyway.

Which milter?

If you're using MIMEDefang, you can bend the SA results whichever way
you like after the fact.

Otherwise, it looks like --virtual-config-dir should work.  See the
spamd man page for details on how to specify this.

-kgd

Re: Way to set user-prefs without a database?

2016-05-19 Thread Tom Hendrikx 
On 19-05-16 05:06, Dan Mahoney, System Admin wrote:
> Hey there,
> 
> We have a couple of user accounts (really, role aliases) that need a
> different required_score from our global defaults.  Since they're role
> accounts, they don't have a homedir.  We're using a milter that passes
> the whole username (including domain name) along, anyway.
> 
> Is there a dead-simple way to make this work using only the config
> files, or do I have to go to the trouble of setting up all of mysql just
> to make this happen?
> 
> Best,
> 
> -Dan Mahoney
> 

How about using "whitelist_to r...@example.tld", possibly with an
adapted negative score for the associated rule (which is not really
clear from the documentation)?

Kind regards,
Tom



signature.asc
Description: OpenPGP digital signature

Re: Way to set user-prefs without a database?

2016-05-19 Thread @lbutlr 
On May 18, 2016, at 9:06 PM, Dan Mahoney, System Admin  
wrote:
> We have a couple of user accounts (really, role aliases) that need a 
> different required_score from our global defaults.  Since they're role 
> accounts, they don't have a homedir.  We're using a milter that passes the 
> whole username (including domain name) along, anyway.
> 
> Is there a dead-simple way to make this work using only the config files, or 
> do I have to go to the trouble of setting up all of mysql just to make this 
> happen?

Set your default required_score at the level your role accounts need and then 
change that default for accounts that have home directories?

-- 
"One of the great tragedies of life is the murder of a beautiful theory
by a gang of brutal facts." - Benjamin Franklin