netflix phishing emails forwarded via sendgrid

2021-01-19 Thread Benny Pedersen 

i have added urls to phishtank

if its could be added rules to spamassassin to detect it better i can 
send sample to sa pmc members


X-Spam-Status: Yes, score=8.9, required=5.0, Autolearn=no 
autolearn_force=no,

LastExt=149.72.91.245
X-Spam-Rules_score: 
DATE_IN_PAST_03_06=1.076,DKIM_SIGNED=-0.1,DKIM_VALID=-0.1,

DKIM_VALID_AU=-0.1,DKIM_VALID_EF=-0.1,HTML_IMAGE_ONLY_32=0.001,
HTML_MESSAGE=0.1,KAM_NUMSUBJECT=0.5,KAM_REALLYHUGEIMGSRC=0.5,
KAM_SENDGRID=1.5,RCVD_IN_BRUKALAI_BLACK=2,SENDGRID_REDIR=0.932,
SPF_HELO_NONE=3,SPF_PASS=-0.1,TXREP=-0.187,UNPARSEABLE_RELAY=0.001

mx relay is sendgrid, but enveloppe sender is not sendgrid

https://phishtank.com/phish_detail.php?phish_id=6927641
https://phishtank.com/phish_detail.php?phish_id=6927893

Upgrading from 3.4.2 to 3.4.5, how to

2021-01-19 Thread Steve Charmer 
Hi, I am running version 3.4.2

/usr/bin/spamassassin -V

SpamAssassin version 3.4.2

  running on Perl version 5.22.1

spamd --version

SpamAssassin Server version 3.4.2

  running on Perl 5.22.1

  with SSL support (IO::Socket::SSL 2.024)

  with zlib support (Compress::Zlib 2.068)

which spamd

/usr/sbin/spamd

==
SA was originally installed using apt-get (Ubuntu-16)


 ==
BACKUP
I would feel safer if I had a backup of the current spamassassin system.
is there a recommended method to backup all files to a tar?

I think I have identified these folders as worthy of backup:

# define an array of folders to backup
backup_dirs=( \
'/etc/spamassassin' \
'/usr/bin' \
'/usr/sbin' \
'/usr/share/perl5' \
'/usr/share/spamassassin' \
'/var/lib/spamassassin' \
)


and I can also backup the bayes database
sa-learn --backup > "${bayes_backup_filename}"

is there anything else you can recommend for backup
 prior to installing the newest version?

Is there a way to check timestamps on files inside spamassassin folders to
guess if any were modified to be different than the files installed at
installation time?
(it has been a few years & I don't really remember if I did anything bad to
those files when I first started learning about SA.)

==
UPGRADE
To upgrade to the latest version, 3.4.5
do I just run:

apt-get install spamassassin

does it simply overwrite existing files?
i.e. I don't need to uninstall the old version first?

Will my local.cf file stay the same?


Thank you in advance