Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread Noel Butler
On 17/07/2020 05:35, @lbutlr wrote:

> On 15 Jul 2020, at 20:34, Noel Butler  wrote: 
> 
>> December 27 (our quietest time of year generally) this year has been slated 
>> for our changeover to remove spamassassin from our network.
> 
> Nose. Spite. Face.
> 
> Can you stop posting about this topic now?

I did 24 hours back wanker, but just for you, I'll continue it 

-- 
Kind Regards, 

Noel Butler 

This Email, including attachments, may contain legally 
privileged
information, therefore remains confidential and subject to copyright
protected under international law. You may not disseminate any part of
this message without the authors express written authority to do so. If
you are not the intended recipient, please notify the sender then delete
all copies of this message including attachments immediately.
Confidentiality, copyright, and legal privilege are not waived or lost
by reason of the mistaken delivery of this message.

Re: sa-update for versions 3.4.2 and older fail lint because of description on non-existent rule was Re: update fail

2020-07-16 Thread Kevin A. McGrail
Agreed.  1879851 is after I submitted the fix but doesn;t include the fix.
I will have to check again after the next rule publishing.  Sorry for the
false alarm.
--
Kevin A. McGrail
Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171


On Thu, Jul 16, 2020 at 5:30 PM Marcus Schopen  wrote:

> Am Mittwoch, den 15.07.2020, 08:11 -0400 schrieb Kevin A. McGrail:
> > Just an update that this is fixed:
> >
> > https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7840
> >
> > Should be a rule update published in the next 48 hours with the fix.
> > Feedback welcome because we are making fixes for older versions so
> > it's harder to gauge if it's fixed without user feedback.
>
> Which version should fix it? Same error with version 1879851.
>
> Ciao!
>
>
>


Re: sa-update for versions 3.4.2 and older fail lint because of description on non-existent rule was Re: update fail

2020-07-16 Thread Marcus Schopen
Am Mittwoch, den 15.07.2020, 08:11 -0400 schrieb Kevin A. McGrail:
> Just an update that this is fixed:
> 
> https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7840
> 
> Should be a rule update published in the next 48 hours with the fix. 
> Feedback welcome because we are making fixes for older versions so
> it's harder to gauge if it's fixed without user feedback.

Which version should fix it? Same error with version 1879851.

Ciao!




Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread @lbutlr
On 15 Jul 2020, at 20:34, Noel Butler  wrote:
> December 27 (our quietest time of year generally) this year has been slated 
> for our changeover to remove spamassassin from our network.

Nose. Spite. Face.

Can you stop posting about this topic now?

-- 
"Are you pondering what I'm pondering?"
"I think so, Brain, but won't it go straight to my hips?!"

Re: update fail

2020-07-16 Thread Kevin A. McGrail
Frederic, I believe ruleset 1879934 has been published and should fix the
issue.  Can you confirm, please?
--
Kevin A. McGrail
Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171


On Wed, Jul 15, 2020 at 7:01 AM Kevin A. McGrail 
wrote:

> On 7/15/2020 6:29 AM, Frédéric Nass wrote:
>
> As of today July 15th, sa-update (3.3.1) is trying to install
> 1879817.tar.gz and it's still failing to do so.
>
> Hi Frederic,
>
> What's the error you are getting specifically?
>
> Can you tell us in which revision of the signatures this is expected to be
> fixed? And confirm that this fix will also work for older versions of SA?
>
> I cannot because I don't know what problem you are having and it works for
> me with no lint errors on 3.4.5. with ruleset 1879817.  I'd like to get it
> working and will look at the error from your sa-update.
>
> A couple more points:
>
> 3.3.1 is ancient released over a decade ago.  3.4.4 is significantly
> better not to mention more secure with numerous bugs and security issues
> fixed including a few CVEs along the way.
>
> Also are you aware that the project's rule updates are ending for that
> version?  We've been working to convey that info and it's on the
> website:*** On March 1, 2020, we will stop publishing rulesets with SHA-1
> checksums.   If you do not update to 3.4.2 or later, you will be stuck at
> the last ruleset with SHA-1 signatures. ***.  This change is based on a
> policy requirement of the foundation and security issues with these weak
> hashes.
>
> Regards,
>
> KAM
>
>
>
>


Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread John Hardin

On Wed, 15 Jul 2020, jdow wrote:

Tokenism is a big thing in politics, probably everywhere on this planet. 
Gotta be seen as doing something, ya know. We need a third house in our 
legislature, the House of Repeals that strikes out dumb laws hastily drafted 
to appease loud mouths.


{o.o}


+1

--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  The one political issue that strips all politicians bare is
  individual gun rights.
---
 Today: the 75th anniversary of the dawn of the Atomic Age


Re: Detecting SendGrid shared IPs

2020-07-16 Thread Kris Deugau

Pedro David Marco wrote:

Is there any way to know whether a Sendgrid IP is shared or dedicated?


Use the FCrDNS data and one or another of the X-Spam-Relays metaheaders. 
 It should be possible to quickly refine these to "good enough", if 
they're not already (watch for word wrap):


header SENDGRID_SHARED_1	X-Spam-Relays-Untrusted =~ /^\[[^\]]+ 
rdns=[\w\d.]+\.shared\.sendgrid\.net /


header SENDGRID_SHARED_2	X-Spam-Relays-Untrusted =~ /^\[[^\]]+ 
rdns=[\w\d.]+.outbound-mail.sendgrid.net /


I suspect the second matches a somewhat different slice of their 
services than you're asking about, but I can't say I can really tell the 
difference from the outside.


-kgd


Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread Ralph Seichter
* Kevin A. McGrail:

> We're getting some positive attention from the verbiage change.

Pluralis Majestatis, is it? ;-)

What you call "the nice post" follows the overall theme of the US
cultural imperialism you pushed in this thread. I see no mention in the
purely US-centric article that (a) people across the world have quite
different concepts of the connection between colours and racially
charged language, (b) changing a few terms in lieu of making meaningful
changes in how people treat each other will probably achieve nothing,
and so forth.

SpamAssassin is not a US-only venture. While you are patting yourself on
the back, hoping to perhaps gain a few contributors (which you are
patronising along the way, if you have not noticed), I think that you
will lose others who find your approach as arrogant and outright silly
as I do. It may be a good time to check on Rspamd again, although I find
the team-of-one approach unnerving.

I can't stand how many American right-wingers behave, especially Exhibit
A in the White House, but this is an issue where left-wing zeal causes
its own screw-ups. Having followed US politics since the Ford
administration, I am sad how things have turned out. We have a lot of
problems of our own here, but I am very glad that I don't have to live
in the US.

-Ralph


Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-16 Thread Thomas Cameron

On 7/14/20 5:55 AM, jdow wrote:
I gotta ask here, "Can't we all skip the ad hominem insults and stick 
to technical merits and goals involved in this change?" Please.


{o.o}


LOL - coming from the woman who has been outright insulting, 
condescending, and dismissive both on- and off-list, this is a 
*hysterical* request. Pot, meet kettle.





Re: Detecting SendGrid shared IPs

2020-07-16 Thread Pedro David Marco
 

   >On Thursday, July 16, 2020, 03:26:08 PM GMT+2, Riccardo Alfieri 
 wrote:  
 >Bumping a little the score for shared IPs? Could make sense..
 
Exactly...


-Pedro   

Re: Detecting SendGrid shared IPs

2020-07-16 Thread Riccardo Alfieri

Bumping a little the score for shared IPs? Could make sense..

On 16/07/20 14:10, m...@junc.eu wrote:

Why?


From: Pedro David Marco 
Date: Thu, Jul 16, 2020 at 09:18 AM
Subject: Detecting SendGrid shared IPs
To: Users 

Is there any way to know whether a Sendgrid IP is shared or dedicated?

Thanks in advance!



Pedro


--
Best regards,
Riccardo Alfieri

Spamhaus Technology
https://www.spamhaustech.com/



Re:Detecting SendGrid shared IPs

2020-07-16 Thread me
Why? 


From: Pedro David Marco 
Date: Thu, Jul 16, 2020 at 09:18 AM
Subject: Detecting SendGrid shared IPs
To: Users 

>
Is there any way to know whether a Sendgrid IP is shared or dedicated?

Thanks in advance!



Pedro


Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread Gaute Gløersen
And when are you going to phase out Liniux?

https://www.theregister.com/2020/07/13/linux_adopts_inclusive_language/

/Gaute G

tor. 16. jul. 2020 kl. 04:34 skrev Noel Butler :

> On 16/07/2020 09:24, Kevin A. McGrail wrote:
>
> All:
>
> We're getting some positive attention from the verbiage change.  See
>
> https://www.linkedin.com/posts/kmcgrail_apache-spamassassin-leads-a-growing-list-activity-6689260331719520256-gMy7
> for a link to a Guardian Digital post about it.
>
> Anyway, I hope those not excited by the change will come around.  We are
> working hard to make it as painless as possible and we have gotten word
> that several tools and projects that integrate with SpamAssassin will
> follow suit.
>
> Regards,
>
> KAM
>
>
> December 27 (our quietest time of year generally) this year has been
> slated for our changeover to remove spamassassin from our network.
>
> Our policies have long excluded using politically motivated companies,
> organisations, equipment and software. you made this political, you do not
> care for the opinions of others unless they agree with yours, so adios
> amigos.
>
>
>
>


Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-16 Thread Gaute Gløersen
And Linus Torvalds has announced this for the Linux kernel:

https://www.theregister.com/2020/07/13/linux_adopts_inclusive_language/

/Gaute G

tor. 16. jul. 2020 kl. 08:14 skrev Thomas Cameron <
thomas.came...@camerontech.com>:

> On 7/10/20 4:33 AM, jdow wrote:
> >
> > Are we now going to be afraid of the unwelcome rather than the dark?
> > Are we going to shine a welcome on problems rather than light?
> >
> > You guys are MAKING problems where they do not exist. Shame on you,
> > children.
> >
> > {^_^}
>
> Nah, you're clinging to old, exclusionary language and behavior when
> being inclusive is so damned easy.
>
> Shame on you, old-timer. Be better than this.
>
> Thomas
>


RE: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread Marc Roos
 

>> It's amazing how SOME Americans are quick to jump on bandwagons 

If you get older you will realize that this typical behaviour of an 
average person, and you will only notice this if your thinking is above 
average. Sad thing, having a system where the average person rules, one 
can only conclude that this human race is going to fail inevitably.

The only people who really understood that the only way the persevere on 
the long run, is to live in harmony in this world (keep ecological 
balance). And those were the ones that got enslaved.

https://www.zerohedge.com/news/2014-08-25/dumb-dumber-scientific-proof-people-are-getting-stupider


RE: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread Marc Roos
 

Have you looked at this rspamd? That has configuration file of 3000 
lines and is sort all-inclusive solution. I think it performs quite 
well.




-Original Message-
To: users@spamassassin.apache.org
Subject: Re: Thanks to Guardian Digital & LinuxSecurity for the nice 
post about SpamAssassin's upcoming change

On 16/07/2020 09:24, Kevin A. McGrail wrote:

All:

We're getting some positive attention from the verbiage change.  
See
https://www.linkedin.com/posts/kmcgrail_apache-spamassassin-leads-a
-growing-list-activity-6689260331719520256-gMy7
for a link to a Guardian Digital post about it. 

Anyway, I hope those not excited by the change will come around.  
We are
working hard to make it as painless as possible and we have gotten 
word
that several tools and projects that integrate with SpamAssassin 
will
follow suit.

Regards,

KAM






December 27 (our quietest time of year generally) this year has been 
slated for our changeover to remove spamassassin from our network.

Our policies have long excluded using politically motivated companies, 
organisations, equipment and software. you made this political, you do 
not care for the opinions of others unless they agree with yours, so 
adios amigos.










RE: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread Marc Roos



You are a racist when you are not treating people equal on the basis of 
the skin colour (or check definition in dictionary). Therefore anyone 
associating people of darker colour with blacklist and lighter colour 
with whitelist and associate this with in-equal treatment, is a racist. 

No one can complain about people trying to change things for the better. 
But lets be real, nothing you do here will make a difference. And I only 
fear that you feel so good about yourself, and then ignorantly continue 
upholding the very system that perpetuates race inequality. 
Yes yes that will happen, you will not think about slavery or inequality 
when you buy your next pair of shoes or apply for a loan at a bank. I do 
hope the people that are advocating this blacklist/whitelist removal so 
strongly, that they:

Don't buy shoes manufactured under slave like conditions.
Don't buy phones manufactured under slave like conditions.
Don't do business with companies that have executive teams that do not 
resemble the diversity of the local population.
Don't buy products from companies with billionaires (look at your US 
billionaires list, does not really resemble the diversity in your 
country)
Don't watch any movies produced in hollywood
Don't put your kids in all white schools


PS. It is my opinion really pathetic to reference a news article where 
you are mentioned. This type of change should come from the heart, 
regardless what others are doing and saying. Now you look like some 
youtuber begging for acknowledgement asking for likes.
To me you are more behaving like someone that follows the crowd without 
thinking, and history has shown that tends to be very dangerous.






-Original Message-
To: users@spamassassin.apache.org
Subject: Re: Thanks to Guardian Digital & LinuxSecurity for the nice 
post about SpamAssassin's upcoming change

So,

This is the heading of the article:


Apache SpamAssassin Leads A Growing List of Open-Source Projects Taking 
Steps to Correct Instances of Racism and White Privilege





Using the word "blacklist" is racism. Does everyone get this! By 
definition you ARE a "RACIST" and ARE "White Privilege[d]."

This is a political movement to blacklist (oohhh, I said it) 
anyone who does not comply. We're no longer angry, we're "not excited," 
how generous.


The spamassassin leadership team are political hacks.

Eric


On 7/15/2020 5:24 PM, Kevin A. McGrail wrote:


All:

We're getting some positive attention from the verbiage change.  
See
https://www.linkedin.com/posts/kmcgrail_apache-spamassassin-leads-a
-growing-list-activity-6689260331719520256-gMy7
for a link to a Guardian Digital post about it. 

Anyway, I hope those not excited by the change will come around.  
We are
working hard to make it as painless as possible and we have gotten 
word
that several tools and projects that integrate with SpamAssassin 
will
follow suit.

Regards,

KAM






Re: Thanks to Guardian Digital & LinuxSecurity for the nice post about SpamAssassin's upcoming change

2020-07-16 Thread Rupert Gallagher
Your LinkedIn post thanks the Guardian while hitting on us by hiding our lack 
of consent.

 Original Message 
On 16 Jul 2020, 01:24, Kevin A. McGrail < kmcgr...@apache.org> wrote:
All:
We're getting some positive attention from the verbiage change. See
https://www.linkedin.com/posts/kmcgrail_apache-spamassassin-leads-a-growing-list-activity-6689260331719520256-gMy7
for a link to a Guardian Digital post about it.
Anyway, I hope those not excited by the change will come around. We are
working hard to make it as painless as possible and we have gotten word
that several tools and projects that integrate with SpamAssassin will
follow suit.
Regards,
KAM
--
Kevin A. McGrail
kmcgr...@apache.org
Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171

RE: Detecting SendGrid shared IPs

2020-07-16 Thread Marc Roos



Blacklist all and just whitelist email addresses you want to receive 
from. 



-Original Message-
From: Pedro David Marco [mailto:pedrod_ma...@yahoo.com] 
Sent: donderdag 16 juli 2020 9:18
To: Users
Subject: Detecting SendGrid shared IPs

Is there any way to know whether a Sendgrid IP is shared or dedicated?

Thanks in advance!



Pedro




Detecting SendGrid shared IPs

2020-07-16 Thread Pedro David Marco
Is there any way to know whether a Sendgrid IP is shared or dedicated?
Thanks in advance!

Pedro