Re: __YOU_WON_01 FP on *won’t* with right single quotation mark
On Tue, 11 Jun 2019, John Hardin wrote: On Tue, 11 Jun 2019, RW wrote: On Tue, 11 Jun 2019 09:05:55 -0700 (PDT) John Hardin wrote: Think MSFT's annoying "smart quotes" converting a single typed apostrophe within a word into a Unicode right single quote so that it Looks Good. I feel it's a valid issue, and the fix is checked in (at least for one flavor of Unicode right single quote, I didn't review the entire Unicode code space). See also __YOU_WON_05 Good point, I will fix that too. Olivier sent me a spample and some more changes were needed. Also, __hk_win_6 hits, and might need a similar exclusion. Hege? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- Are you a mildly tech-literate politico horrified by the level of ignorance demonstrated by lawmakers gearing up to regulate online technology they don't even begin to grasp? Cool. Now you have a tiny glimpse into a day in the life of a gun owner. -- Sean Davis --- 804 days since the first commercial re-flight of an orbital booster (SpaceX)
Re: Meta for bogus MIME with DKIM valid?
On Wed, 12 Jun 2019, Amir Caspi wrote: On Jun 4, 2019, at 2:11 PM, Amir Caspi wrote: Locally, I've got the score at 4.0, and will be increasing it to 4.5 shortly. At least with my spamset (per the spamples I posted), a score of 4.5 seems to be the "magic" value that should catch almost all the FNs (at least the ones that hit BAYES_50 ... the ones that hit BAYES_00 might require more aggression). I'm getting a ton of zero-hour snowshoe spam today that's scoring BAYES_50 and hitting no other rules besides BOGUS_MIME_VERSION. These all score 4.6 with BOGUS_MIME_VERSION = 4.0. I'm going to increase locally to 4.5, and that should get rid of these for me... but I think we should really expedite deployment of this rule for production, I expect I'm not the only one this affects... Looks like it's suddenly worthwhile in masscheck as well: https://ruleqa.spamassassin.org/20190612-r1861099-n/__BOGUS_MIME_VER_01/detail https://ruleqa.spamassassin.org/20190612-r1861099-n/__BOGUS_MIME_VER_02/detail I'll add a scored rule. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- Are you a mildly tech-literate politico horrified by the level of ignorance demonstrated by lawmakers gearing up to regulate online technology they don't even begin to grasp? Cool. Now you have a tiny glimpse into a day in the life of a gun owner. -- Sean Davis --- 804 days since the first commercial re-flight of an orbital booster (SpaceX)
Re: Meta for bogus MIME with DKIM valid?
On Jun 4, 2019, at 2:11 PM, Amir Caspi wrote: > > Locally, I've got the score at 4.0, and will be increasing it to 4.5 shortly. > At least with my spamset (per the spamples I posted), a score of 4.5 seems > to be the "magic" value that should catch almost all the FNs (at least the > ones that hit BAYES_50 ... the ones that hit BAYES_00 might require more > aggression). I'm getting a ton of zero-hour snowshoe spam today that's scoring BAYES_50 and hitting no other rules besides BOGUS_MIME_VERSION. These all score 4.6 with BOGUS_MIME_VERSION = 4.0. I'm going to increase locally to 4.5, and that should get rid of these for me... but I think we should really expedite deployment of this rule for production, I expect I'm not the only one this affects... Cheers. --- Amir
Re: Whitelist rcvd IP
I believe the "whitelist_from_rcvd" option, which is now in SpamAssassin core, functions the same as the old Mail::SpamAssassin::Plugin::WhitelistRcvdIP module, though with a slightly different syntax. If you really want to use it as a blanket whitelist for a certain IP address or range, the first parameter can be specified as *@*. Whether that's advisable, I'll leave to others to comment. Also, the old WhitelistRcvdIP plugin is about 12 years old, and I see no development since then, so I'd be reluctant to use it. On Wed, 12 Jun 2019, Emanuel Gonzalez wrote: Hello, I have the need to mark certain IP addresses as secure, only for receiving mail, but I can not find information about it. In a publication they advise using the module called Mail :: SpamAssassin :: Plugin :: WhitelistRcvdIP but I can not find it. Any ideas.? Regards, -- Public key #7BBC68D9 at| Shane Williams http://pgp.mit.edu/| System Admin - UT CompSci =--+--- All syllogisms contain three lines | sha...@shanew.net Therefore this is not a syllogism | www.ischool.utexas.edu/~shanew
Re: Whitelist rcvd IP
On Wed, 12 Jun 2019, Benny Pedersen wrote: Emanuel Gonzalez skrev den 2019-06-12 17:48: I have the need to mark certain IP addresses as secure, only for receiving mail, but I can not find information about it. its trusted_networks That is not whitelisting. That's whether or not a network is trusted to not forge header information. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- Maxim VI: If violence wasn’t your last resort, you failed to resort to enough of it. --- 804 days since the first commercial re-flight of an orbital booster (SpaceX)
Re: Whitelist rcvd IP
On Wed, 12 Jun 2019, Emanuel Gonzalez wrote: Hello, I have the need to mark certain IP addresses as secure, only for receiving mail, but I can not find information about it. In a publication they advise using the module called Mail :: SpamAssassin :: Plugin :: WhitelistRcvdIP but I can not find it. Any ideas.? How is SA glued into your MTA? Are there options there to *completely skip* SA scanning for given submitting IP addresses? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- Maxim VI: If violence wasn’t your last resort, you failed to resort to enough of it. --- 804 days since the first commercial re-flight of an orbital booster (SpaceX)
Re: Whitelist rcvd IP
Emanuel Gonzalez skrev den 2019-06-12 17:48: I have the need to mark certain IP addresses as secure, only for receiving mail, but I can not find information about it. its trusted_networks In a publication they advise using the module called Mail :: SpamAssassin :: Plugin :: WhitelistRcvdIP but I can not find it. link to this dokumeention is where ? Any ideas.? no
Whitelist rcvd IP
Hello, I have the need to mark certain IP addresses as secure, only for receiving mail, but I can not find information about it. In a publication they advise using the module called Mail :: SpamAssassin :: Plugin :: WhitelistRcvdIP but I can not find it. Any ideas.? Regards,
ApacheCon North America 2019 Schedule Now Live!
Dear Apache Enthusiast, (You’re receiving this message because you’re subscribed to one or more Apache Software Foundation project user mailing lists.) We’re thrilled to announce the schedule for our upcoming conference, ApacheCon North America 2019, in Las Vegas, Nevada. See it now at https://www.apachecon.com/acna19/schedule.html The event will be held September 9th through 12th at the Flamingo Hotel. Register today at https://www.apachecon.com/acna19/register.html Our schedule features keynotes by James Gosling, the father of Java; Samaira Mehta, founder and CEO of the Billion Kids Can Code project; and David Brin, noted science fiction author and futurist. And we’ll have a discussion panel featuring some of the founders of The Apache Software Foundation, talking about the past as well as their vision for the future. ApacheCon is the flagship convention of the ASF, and features tracks curated by many of our project communities: Apache Drill, Apache Karaf, Big Data, TomcatCon, Apache Cloudstack, Integration, Apache Cassandra, Streaming, Geospatial software, Graph processing, Internet of Things, Community, Machine Learning, Apache Traffic Control, Apache Beam, Observability, OFBiz, and Mobile app development. The Hackathon, which will run all day, every day, is the place to meet your project community, and get some serious work knocked out in a short focused time. The BarCamp is the place to discuss the topics that are important to you, with your colleagues, in an unconference format. We offer financial assistance for travel and lodging for those who want to come to ApacheCon but are unable to afford it. Apply at http://apache.org/travel/ by June 21st to be considered for this. If you’re unable to make it to North America, we’ll also be running ApacheCon Europe in Berlin in October. Details of that event are at https://aceu19.apachecon.com/ Follow us on Twitter - @ApacheCon - for all the latest updates. See you in Las Vegas! Rich Bowen, VP Conferences, The ASF rbo...@apache.org http://apachecon.com/
