Re: dbip-country-lite database

2020-11-19 Thread Philip Prindeville



> On Nov 15, 2020, at 11:48 AM, Dominic Raferd  wrote:
> 
> 
> 
> On Sun, 15 Nov 2020, 18:27 Philip Prindeville, 
>  wrote:
> Is anyone else using this database?
> 
> I’ve been using it with xt_geoip and Mimedefang and Plugin::URILocalBL to 
> block countries since Maxmind retired support for GeoIP on RHEL.
> 
> But I keep running into cases where parts of the database are very obviously 
> wrong.  It’s showing about 50% of 183.128.0.0-183.170.255.255 as being in the 
> US.  But APNIC says 183.128.0.0/11 is CHINANET.
> 
> Can you not use GeoIP2?


The licensing has changed.

Also, a lot of other packages (like xtables-addons) have pivoted away from the 
MaxMind database.

-Philip



Apache SpamAssassin and Spammers 1st Amendment Rights

2020-11-19 Thread Kevin A. McGrail

Afternoon Everyone,

So over the years, I have gotten a lot of complaints from spammers about 
how I'm breaking their 1st amendment rights by blocking their spam as 
free speech.  I've had to explain that I'm not the government and hence 
there are no 1st amendment rights involved.


However, my friend, Steve Effros, just wrote a far more eloquent article 
about it and I thought others on this list might appreciate it:


https://www.cablefax.com/regulation/first-things-first 



Regards,

KAM

--
Kevin A. McGrail
kmcgr...@apache.org

Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171



Re: Certain rules with zero value

2020-11-19 Thread Dean Carpenter
 

On 2020-11-18 1:45 pm, RW wrote: 

> On Wed, 18 Nov 2020 09:44:21 -0500
> Dean Carpenter wrote:
> 0.0 NO_DNS_FOR_FROM DNS: ENVELOPE SENDER HAS NO MX OR A DNS RECORDS -0.5 
> FROM_IS_REPLY_TO From and REPPLY-TO is the same 0.0 SPF_NONE SPF: SENDER DOES 
> NOT PUBLISH AN SPF RECORD

> Heh, the FROM_IS_REPLY_TO description has a slight typo ...

FROM_IS_REPLY_TO is neither a standard rule nor a KAM rule. 

Also the descriptions for a couple of the rules have been converted to
upper case.

Ah, I totally forgot I pulled in the eXtremeshok rules to play with. 

Hrm - test system status email 

> /etc/cron.daily/spamassassin:
> Nov 19 06:30:11.784 [312057] info: rules: meta test KAM_NOTIFY2 has 
> dependency 'KAM_IFRAME' with a zero score
> Nov 19 06:30:11.785 [312057] info: rules: meta test JMQ_CONGRAT has 
> dependency 'KAM_RAPTOR_ALTERED' with a zero score
> Nov 19 06:30:11.790 [312057] info: rules: meta test KAM_BADPDF2 has 
> dependency 'KAM_RPTR_SUSPECT' with a zero score
> Nov 19 06:30:11.794 [312057] info: rules: meta test KAM_CARD has dependency 
> 'KAM_RPTR_SUSPECT' with a zero score
> Nov 19 06:30:11.797 [312057] info: rules: meta test KAM_REALLY_FAKE_DELIVER 
> has dependency 'KAM_RPTR_PASSED' with a zero score
> Nov 19 06:30:11.801 [312057] info: rules: meta test KAM_JURY has dependency 
> 'KAM_RAPTOR_ALTERED' with a zero score
> Nov 19 06:30:11.802 [312057] info: rules: meta test KAM_FAKE_DELIVER has 
> dependency 'KAM_RAPTOR_ALTERED' with a zero score

 

Re: What can one do abut outlook.com?

2020-11-19 Thread RW
On Thu, 19 Nov 2020 18:29:48 +1100
AK wrote:

> On 26/10/20 5:17 am, Marc Roos wrote:  
> >> make a reality check outside your small bubble!
> > typical low iq response. I was already discussing the validity of
> > these soccerplayer contracts before they had to change the system.  

> Just thought I'd let you know this same person was blocked from
> CentOS mailing list a while back due to trolling.  I'm not sure the
> chemicals deep in his noggin work as they are supposed to.  On the
> CentOS mailing list, we stopped feeding the troll and I,
> specifically, made sure that I'd never again see an email from his
> likes.  I wonder if the SpamAssassin admins could just as well stop
> feeding the troll here as well.   

AFAIK they did that years ago, I don't receive anything through the
list.

However on this one I agree with him (assuming he's objecting to
blocking Outlook).  And unlike most people on this list he has end-users
who are paying for email and can vote with their feet if he cuts
corners.

Anyone who filters their own email can do what they like, but if an
admin blocked my mail from outlook, I'd assume some combination of
laziness and incompetence was behind it.