Re: Just to lighten your day?

[Dave Wreski]

Hi,

On 05/02/2018 02:21 PM, Joe Acquisto-j4 wrote:

One slipped through, with this subtle sig line (thought it might brighten 
someones day . . . )

"Note: Failure to Verify will lead to final termination of your email account.

Technical Team
Email Administrator
All Right Reversed 2018.(c)"


Being the open source advocates that we are here, I actually thought it 
was a reference to the "copyleft" license.


https://en.wikipedia.org/wiki/All_rights_reversed

Not to be confused with the Chemical Brothers song by the same name, lol.

Best,
Dave

Re: OFF-TOPIC: Re: Just to lighten your day?

[Joe Acquisto-j4]

Always reserve the right to reverse yourself . . . 

>>> On 5/3/2018 at 12:53 PM, in message
<20180503165352.xikwxwq5dpdvc...@matica.foolinux.mooo.com>, Ian Zimmerman
 wrote:
> On 2018-05-02 14:03, John Hardin wrote:
> 
>> Or maybe "He's still moving towards the keyboard! LART him again!"
> 
> I thought the funniest part was the last line.
> 
> -- 
> Please don't Cc: me privately on mailing lists and Usenet,
> if you also post the followup to the list or newsgroup.
> To reply privately _only_ on Usenet and on broken lists
> which rewrite From, fetch the TXT record for no-use.mooo.com.

Re: Malforrmed List-id

[Alex]

Hi,

>> >> header__KP_LIST_ID_DOMAIN_IN_BRACKETS List-id =~
>> >> /<([\w-]+)?(\.[\w-]+)+>/
>> >>
>> >> describe KP_LIST_ID_DOMAIN_IN_BRACKETS List-id has domain in angle
>> >> brackets
>> >> meta   KP_LIST_ID_DOMAIN_IN_BRACKETS
>> >> __KP_LIST_ID_DOMAIN_IN_BRACKETS score
>> >> KP_LIST_ID_DOMAIN_IN_BRACKETS -15.0
>> >
>> > I think this rule is a bad idea.
>>
>> basicly it should be ! in meta rule
>>
> He's already given such a rule.

Turns out even the good rule is a bad rule. It hits on legitimate mail
from no-re...@rsa.com, i...@lists.cbc.ca,
communityad...@communities-mail.ca.com, em...@email.koshermedia.com
and tons of others.

From: RSA Product Team 
List-ID: RSA SecurID Access Advisories

From: "CBC" 
List-id: 1704669

From: Community Admin 
List-ID: null

From: "Hotel Bisnow" 
List-Id: 

From: =?UTF-8?Q?Stuart=20Gordon=20MD=20=20=20-=20HAVA=20NAGRILLA=202018?=

List-Id: MTAwOTYzMi0xOTc1NTEzLTM2Nw==

Re: Malforrmed List-id

[RW]

On Thu, 03 May 2018 19:58:24 +0200
Benny Pedersen wrote:

> Alex skrev den 2018-05-03 19:05:
> > Hi,
> >   
> >> header__KP_LIST_ID_DOMAIN_IN_BRACKETS List-id =~
> >> /<([\w-]+)?(\.[\w-]+)+>/
> >> 
> >> describe KP_LIST_ID_DOMAIN_IN_BRACKETS List-id has domain in angle 
> >> brackets
> >> meta   KP_LIST_ID_DOMAIN_IN_BRACKETS
> >> __KP_LIST_ID_DOMAIN_IN_BRACKETS score
> >> KP_LIST_ID_DOMAIN_IN_BRACKETS -15.0  
> > 
> > I think this rule is a bad idea.  
> 
> basicly it should be ! in meta rule
> 

He's already given such a rule.



> meta   KP_LIST_ID_DOMAIN_IN_BRACKETS !__KP_LIST_ID_DOMAIN_IN_BRACKETS

That would hit everything without a List-Id header.

Re: Malforrmed List-id

[Benny Pedersen]

Alex skrev den 2018-05-03 19:05:

Hi,


header__KP_LIST_ID_DOMAIN_IN_BRACKETS List-id =~
/<([\w-]+)?(\.[\w-]+)+>/

describe KP_LIST_ID_DOMAIN_IN_BRACKETS List-id has domain in angle 
brackets

meta   KP_LIST_ID_DOMAIN_IN_BRACKETS __KP_LIST_ID_DOMAIN_IN_BRACKETS
score  KP_LIST_ID_DOMAIN_IN_BRACKETS -15.0


I think this rule is a bad idea.


basicly it should be ! in meta rule

meta   KP_LIST_ID_DOMAIN_IN_BRACKETS !__KP_LIST_ID_DOMAIN_IN_BRACKETS

and score positive not negative


If the email is not spam, then
there's nothing that otherwise would restrict it from being delivered.


spamassassin is tag only, so it does not matter on delivey


Including a valid List-ID while the rest of the email is spam is an
almost guarantee it will be delivered.


corpus testing should show how bad it is if it is


No reason to deduct points for
a valid email.


fokus on ! rules is way forward

Re: Malforrmed List-id

[Benny Pedersen]

Kenneth Porter skrev den 2018-05-03 18:54:
--On Thursday, May 03, 2018 4:16 PM +0100 RW 
 wrote:



The '?' seems superfluous.


Agreed. I removed it and restarted my SA services (spamd and 
mimedefang).


hallo, mimedefang does not use spamd

and amavisd does not use mimedefang and spamd

simplyfi life with spampd :=)

Re: Malforrmed List-id

[David Jones]

On 05/03/2018 12:05 PM, Alex wrote:

Hi,


header__KP_LIST_ID_DOMAIN_IN_BRACKETS List-id =~
/<([\w-]+)?(\.[\w-]+)+>/

describe KP_LIST_ID_DOMAIN_IN_BRACKETS List-id has domain in angle brackets
meta   KP_LIST_ID_DOMAIN_IN_BRACKETS __KP_LIST_ID_DOMAIN_IN_BRACKETS
score  KP_LIST_ID_DOMAIN_IN_BRACKETS -15.0


I think this rule is a bad idea. If the email is not spam, then
there's nothing that otherwise would restrict it from being delivered.
Including a valid List-ID while the rest of the email is spam is an
almost guarantee it will be delivered. No reason to deduct points for
a valid email.




I agree.  Whitelisting or subtracting points should be tied to domain 
authentication or IP reputation.  Spammers are reading this email thread 
and are already crafting emails to match this rule.


--
David Jones

Re: Malforrmed List-id

[Alex]

Hi,

> header__KP_LIST_ID_DOMAIN_IN_BRACKETS List-id =~
> /<([\w-]+)?(\.[\w-]+)+>/
>
> describe KP_LIST_ID_DOMAIN_IN_BRACKETS List-id has domain in angle brackets
> meta   KP_LIST_ID_DOMAIN_IN_BRACKETS __KP_LIST_ID_DOMAIN_IN_BRACKETS
> score  KP_LIST_ID_DOMAIN_IN_BRACKETS -15.0

I think this rule is a bad idea. If the email is not spam, then
there's nothing that otherwise would restrict it from being delivered.
Including a valid List-ID while the rest of the email is spam is an
almost guarantee it will be delivered. No reason to deduct points for
a valid email.



>

Re: Malforrmed List-id

[Kenneth Porter]

--On Thursday, May 03, 2018 4:16 PM +0100 RW  
wrote:



The '?' seems superfluous.


Agreed. I removed it and restarted my SA services (spamd and mimedefang).

Re: OFF-TOPIC: Re: Just to lighten your day?

[Ian Zimmerman]

On 2018-05-02 14:03, John Hardin wrote:

> Or maybe "He's still moving towards the keyboard! LART him again!"

I thought the funniest part was the last line.

-- 
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet and on broken lists
which rewrite From, fetch the TXT record for no-use.mooo.com.

Re: Malforrmed List-id

[Kenneth Porter]

--On Thursday, May 03, 2018 3:28 AM +0200 Benny Pedersen  wrote:


List-Id: 

valid or invalid ? :=)


Your message got this score:

X-Spam-Status: No, score=-23.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,

DKIM_VALID,DKIM_VALID_AU,KP_LIST_ID_DOMAIN_IN_BRACKETS,MAILING_LIST_MULTI,
RCVD_IN_DNSWL_HI autolearn=ham autolearn_force=no version=3.4.0


i would like developpers to begin make use of
Mail::SpamAssassin::Maillist.pm

if it exists, there is to many definations on maillists already in rule
sets, and non use maillist.pm


My CentOS 7 package includes MailingList.pm (not Maillist.pm) and has no 
man page for that module. Full path for those who want to inspect it:


/usr/share/perl5/vendor_perl/Mail/SpamAssassin/MailingList.pm

Re: Increase scores based on lewd body text

[RW]

On Thu, 3 May 2018 10:38:14 -0300
Steve Mallett wrote:

> Didn't cc users@
> 
> How do I add a non sa-compile ruleset to spamassassin? The googles
> are not helping.
> 

If  you mean non sa-update, you put them in the directory that
contains the global configuration file local.cf. In Linux this is
usually /etc/mail/spamassassin.

More generally  you can find it like this:


$ grep  LOCAL_RULES_DIR   `which spamassassin`
my $LOCAL_RULES_DIR = '/usr/local/etc/mail/spamassassin';#

Re: Fwd: Increase scores based on lewd body text

[Benny Pedersen]

Steve Mallett skrev den 2018-05-03 15:38:

Didn't cc users@

How do I add a non sa-compile ruleset to spamassassin? The googles are
not helping.


non sa-compile ?

show what you have tryed would help us to help you more

all rules must support sa-compile

else spamassassin --lint will fail

i dont know where local.cf is in ubuntu, but your edits must be there in 
this file

Re: Malforrmed List-id

[RW]

On Wed, 02 May 2018 17:18:22 -0700
Kenneth Porter wrote:

> header__KP_LIST_ID_DOMAIN_IN_BRACKETS List-id =~ 
> /<([\w-]+)?(\.[\w-]+)+>/

The '?' seems superfluous.

Fwd: Increase scores based on lewd body text

[Steve Mallett]

Didn't cc users@

How do I add a non sa-compile ruleset to spamassassin? The googles are not
helping.

on Ubuntu16

Steve

On Tue, May 1, 2018 at 7:52 PM, Kevin A. McGrail 
wrote:

> I have several rules for sexually explicit content in KAM.cf.  See
> https://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf
>
> --
> Kevin A. McGrail
> Asst. Treasurer & VP Fundraising, Apache Software Foundation
> Chair Emeritus Apache SpamAssassin Project
> https://www.linkedin.com/in/kmcgrail - 703.798.0171
>
> On Tue, May 1, 2018 at 6:42 PM, Steve Mallett  wrote:
>
>>
>> Hi,
>>
>> I have mboxs I'm running spamassassin against & many emails with very
>> lewd body text have the same scores as other emails without.
>>
>> I'm invoking via: formail -s procmail ~/procmail.rc < mbox
>>
>> SA V: 3.4.1
>>
>> Running on Ubuntu 16.04LTS
>>
>> How can increase the scores on bad words in body text and/or is there a
>> recipe specifically for that type of thing?
>>
>>
>> Steve
>>
>
>