RE: Email from myself to myself
On Thu, May 28, 2009 16:11, hateSpam wrote: > > I got it thanks. > Yes i am not whitelisted but in spamassassin I put the domain of all spams > to be marked as spam like (*...@brabble.com) to mark all > but spams are keep coming with different domain name. used "block sender" in outlock express ? did it work for microsoft ? :) better start whitelist based on trusted senders, not random sender domain that is unknown to you if you use whitelist_auth in local.cf it will match on full sender email based on either dkim and or spf pass results -- http://localhost/ 100% uptime and 100% mirrored :)
Re: Email from myself to myself
On Thu, May 28, 2009 13:31, hateSpam wrote: > Dear All, I am getting email from myself to my self all Pills adverts > and it is spam. Is there any way to solve the problem. I get about > 6 every day. add spf to your own domain, and test spf on your mta, begin with softfails, and when its stable go for full spf pass only or use postfwd rule to match sender equal to recipient remember only test this in mta, not in spamassassin google equal postfwd -- http://localhost/ 100% uptime and 100% mirrored :)
Re: Email from myself to myself
On Thu, 2009-05-28 at 08:59 -0700, an anonymous Nabble user wrote:
> I have never seen x-Spam header in the email.
Skimming through this thread, specifically reading your comments and
looking at the headers pasted...
Odds are, you have SA installed (according to some previous thread), but
it isn't integrated in your mail processing chain. That means, you are
not using SA.
> Yes it is on shared server.
Err, sorry, didn't you yesterday say you ran 'yum update' on your CentOS
server? That doesn't seem to match...
--
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: Email from myself to myself
hateSpam wrote: I have spamassassin installed in my server but I have never had an email wht [SPAM] in the subject. I get lots of spam. I think it is not checking properly. anybody know how to solve the problem please? There are lots of different ways to use SA with your email. We can't tell you how to fix it until we know how it is set up. Is it run during the smtp conversation as a milter or via Amavisd-new? Is it running during delivery via procmail or maildrop? Also, SpamAssassin may not be configured to put the [SPAM] flag in the subject. Take a look at the headers and see if there are any 'X-Spam' headers in your emails. If SA is working properly, some of those headers should exist on every email. If you are using Amavisd-new, the headers will be slightly different, but they should still be there. -- Bowie
Re: Email from myself to myself
I have never seen x-Spam header in the email. Yes it is on shared server. -- View this message in context: http://www.nabble.com/Email-from-myself-to-myself-tp23759955p23764717.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Email from myself to myself
Do you see any x-Spam headers in the emails ? Is this on a shared server (cPanel)? hateSpam wrote: I have spamassassin installed in my server but I have never had an email wht [SPAM] in the subject. I get lots of spam. I think it is not checking properly. anybody know how to solve the problem please?
Re: Email from myself to myself
I have spamassassin installed in my server but I have never had an email wht [SPAM] in the subject. I get lots of spam. I think it is not checking properly. anybody know how to solve the problem please? John Hardin wrote: > > On Thu, 28 May 2009, hateSpam wrote: > >> What is white_list and how can I check it. sorry about all these question >> I >> am new in Linux specially on server. > > The various whitelists (apart from AWL) add -100 points to messages they > match. > > To check it, look in all of your local config files (typically > /etc/mail/spamassassin/*.cf) for lines containing "whitelist_" > > If you have any that are "whitelist_from *...@your.domain" then that will > cause problems. > >> Thanks >> hateSpam >> >> John Hardin wrote: >>> >>> On Thu, 28 May 2009, hateSpam wrote: >>> >>>> I am getting email from myself to my self all Pills adverts and it is >>>> spam. Is there any way to solve the problem. I get about 6 every day. >>> >>> Did you happen to whitelist_from your own domain? > > -- > John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ > jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org > key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 > --- >The fetters imposed on liberty at home have ever been forged out >of the weapons provided for defense against real, pretended, or >imaginary dangers from abroad. -- James Madison, 1799 > ------- > 9 days until the 65th anniversary of D-Day > > -- View this message in context: http://www.nabble.com/Email-from-myself-to-myself-tp23759955p2376.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Email from myself to myself
I have only blacklist_from not any whitelist_from John Hardin wrote: > > On Thu, 28 May 2009, hateSpam wrote: > >> What is white_list and how can I check it. sorry about all these question >> I >> am new in Linux specially on server. > > The various whitelists (apart from AWL) add -100 points to messages they > match. > > To check it, look in all of your local config files (typically > /etc/mail/spamassassin/*.cf) for lines containing "whitelist_" > > If you have any that are "whitelist_from *...@your.domain" then that will > cause problems. > >> Thanks >> hateSpam >> >> John Hardin wrote: >>> >>> On Thu, 28 May 2009, hateSpam wrote: >>> >>>> I am getting email from myself to my self all Pills adverts and it is >>>> spam. Is there any way to solve the problem. I get about 6 every day. >>> >>> Did you happen to whitelist_from your own domain? > > -- > John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ > jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org > key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 > --- >The fetters imposed on liberty at home have ever been forged out >of the weapons provided for defense against real, pretended, or >imaginary dangers from abroad. -- James Madison, 1799 > ------- > 9 days until the 65th anniversary of D-Day > > -- View this message in context: http://www.nabble.com/Email-from-myself-to-myself-tp23759955p23763913.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Email from myself to myself
On Thu, 28 May 2009, hateSpam wrote: What is white_list and how can I check it. sorry about all these question I am new in Linux specially on server. The various whitelists (apart from AWL) add -100 points to messages they match. To check it, look in all of your local config files (typically /etc/mail/spamassassin/*.cf) for lines containing "whitelist_" If you have any that are "whitelist_from *...@your.domain" then that will cause problems. Thanks hateSpam John Hardin wrote: On Thu, 28 May 2009, hateSpam wrote: I am getting email from myself to my self all Pills adverts and it is spam. Is there any way to solve the problem. I get about 6 every day. Did you happen to whitelist_from your own domain? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- The fetters imposed on liberty at home have ever been forged out of the weapons provided for defense against real, pretended, or imaginary dangers from abroad. -- James Madison, 1799 --- 9 days until the 65th anniversary of D-Day
Re: Email from myself to myself
On 28.05.09 07:11, hateSpam wrote: > I got it thanks. > Yes i am not whitelisted but in spamassassin I put the domain of all spams > to be marked as spam like (*...@brabble.com) to mark all > but spams are keep coming with different domain name. That is what spammers do, They use any possible domain to send spam from. Just forget that kind of "spam filtering". Properly configured spamassassin can catch spam much mre effectively. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The early bird may get the worm, but the second mouse gets the cheese.
Re: Email from myself to myself
On Thu, 28 May 2009, Jim Knuth wrote: am 28.05.2009 15:33 Uhr schrieb John Hardin : On Thu, 28 May 2009, hateSpam wrote: I am getting email from myself to my self all Pills adverts and it is spam. Is there any way to solve the problem. I get about 6 every day. Did you happen to whitelist_from your own domain? I think (IMHO) this is a bad idea .. can be faked, you know .. You are correct. That's why I asked. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- The fetters imposed on liberty at home have ever been forged out of the weapons provided for defense against real, pretended, or imaginary dangers from abroad. -- James Madison, 1799 --- 9 days until the 65th anniversary of D-Day
RE: Email from myself to myself
-Original Message- From: hateSpam [mailto:khwaja_a...@yahoo.co.uk] Sent: Thursday, May 28, 2009 10:11 To: users@spamassassin.apache.org Subject: RE: Email from myself to myself I got it thanks. Yes i am not whitelisted but in spamassassin I put the domain of all spams to be marked as spam like (*...@brabble.com) to mark all but spams are keep coming with different domain name. Thanks hateSpam --- Welcome to the battle...!! Pete
RE: Email from myself to myself
I got it thanks. Yes i am not whitelisted but in spamassassin I put the domain of all spams to be marked as spam like (*...@brabble.com) to mark all but spams are keep coming with different domain name. Thanks hateSpam Peter P. Benac wrote: > > -Original Message- > From: hateSpam [mailto:khwaja_a...@yahoo.co.uk] > Sent: Thursday, May 28, 2009 09:48 > To: users@spamassassin.apache.org > Subject: Re: Email from myself to myself > > > What is white_list and how can I check it. sorry about all these question > I > am new in Linux specially on server. > > > Thanks > hateSpam > > - > > If you don't know what it is you are probably not white-listing yourself > and > that is a good thing. > > White-listing is a way to tell SpamAssassin or any other Spam filtering > that > it's OK to let a specific email address through despite it being full of > Spam (i.e. American Airline's airmail) or coming from a known Spam source > (mail.ru). > > Use it wisely. > > Regards, > Pete > > > To have principles... > First have courage.. With principles comes integrity!!! > > > > -- View this message in context: http://www.nabble.com/Email-from-myself-to-myself-tp23759955p23762545.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
RE: Email from myself to myself
-Original Message- From: hateSpam [mailto:khwaja_a...@yahoo.co.uk] Sent: Thursday, May 28, 2009 09:48 To: users@spamassassin.apache.org Subject: Re: Email from myself to myself What is white_list and how can I check it. sorry about all these question I am new in Linux specially on server. Thanks hateSpam - If you don't know what it is you are probably not white-listing yourself and that is a good thing. White-listing is a way to tell SpamAssassin or any other Spam filtering that it's OK to let a specific email address through despite it being full of Spam (i.e. American Airline's airmail) or coming from a known Spam source (mail.ru). Use it wisely. Regards, Pete To have principles... First have courage.. With principles comes integrity!!!
Re: Email from myself to myself
What is white_list and how can I check it. sorry about all these question I am new in Linux specially on server. Thanks hateSpam John Hardin wrote: > > On Thu, 28 May 2009, hateSpam wrote: > >> I am getting email from myself to my self all Pills adverts and it is >> spam. Is there any way to solve the problem. I get about 6 every day. > > Did you happen to whitelist_from your own domain? > > -- > John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ > jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org > key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 > --- >Any time law enforcement becomes a revenue center, the system >becomes corrupt. > --- > 9 days until the 65th anniversary of D-Day > > -- View this message in context: http://www.nabble.com/Email-from-myself-to-myself-tp23759955p23762046.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Email from myself to myself
am 28.05.2009 15:33 Uhr schrieb John Hardin : > On Thu, 28 May 2009, hateSpam wrote: > >> I am getting email from myself to my self all Pills adverts and it is >> spam. Is there any way to solve the problem. I get about 6 every day. > > Did you happen to whitelist_from your own domain? > I think (IMHO) this is a bad idea .. can be faked, you know .. -- mit freundlichem Gruss - with kind regard Jim Knuth #ICQ 277289867 Bitte keine geschaeftliche Anfragen. Dies ist mein privater Account! Please ask no business inquiries. That is only my private account!
Re: Email from myself to myself
On Thu, 28 May 2009, hateSpam wrote: I am getting email from myself to my self all Pills adverts and it is spam. Is there any way to solve the problem. I get about 6 every day. Did you happen to whitelist_from your own domain? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- Any time law enforcement becomes a revenue center, the system becomes corrupt. --- 9 days until the 65th anniversary of D-Day
Re: Email from myself to myself
thus RW spake: On Thu, 28 May 2009 05:37:28 -0700 (PDT) hateSpam wrote: Thanks for reply. i) How can I check ( open relay ) in postfix. I looked at but could not find. When you say "from myself to my self" it sounds like simple address spoofing which spammers do all the time. It doesn't imply an open relay, and your server being an open relay doesn't even help the spammer to send to you. ii) When I check the header all information is about our server. I can not see any external server. Well, there's a different IP adress in X-Originating-Ip, so you have presumably cut some received headers off. You mean this *X-Originating-Ip:[14.960.49.68]* one? ;)
Re: Email from myself to myself
On Thu, 28 May 2009 05:37:28 -0700 (PDT) hateSpam wrote: > > Thanks for reply. > > i) How can I check ( open relay ) in postfix. I looked at but could > not find. When you say "from myself to my self" it sounds like simple address spoofing which spammers do all the time. It doesn't imply an open relay, and your server being an open relay doesn't even help the spammer to send to you. > > ii) When I check the header all information is about our server. I > can not see any external server. Well, there's a different IP adress in X-Originating-Ip, so you have presumably cut some received headers off.
Re: Email from myself to myself
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 thus hateSpam spake: | Thanks for reply. | | i) How can I check ( open relay ) in postfix. I looked at but could not | find. Check if your server accepts to relay mail from outside your network (or whatever you configured it to) or unauthenticated users (if you use mechs like SASL or SMTP-after-POP | ii) When I check the header all information is about our server. I can not | see any external server. | | the header is some thing like bellow: | | From: myn...@example.com | Subject: RE: 28.5.2009 ID07076 79% 0FF on PFIZER ! | Date: 28 May 2009 06:56:49 BST | To: myn...@example.com | Return-Path: | X-Original-To:myn...@example.com | Delivered-To: myn...@example.com | Received: from 122.161.59.196 (unknown [122.161.59.196]) by | server.example.com (Postfix) with SMTP id 8AA5D448C1D for | ; Thu, 28 May 2009 06:56:49 +0100 (BST) | X-Originating-Ip: [14.960.49.68] | X-Originating-Email: [myn...@example.com] | X-Sender: myn...@example.com | Mime-Version: 1.0 | Content-Type: text/html; charset="ISO-8859-1" | Content-Transfer-Encoding:7bit | Message-Id: <20090528111649.8aaf67888...@server.example.com> | | | | Thanks | hateSpam | | | Timo Schoeler-2 wrote: | thus hateSpam spake: | | Dear All, | | I am getting email from myself to my self all Pills adverts and it is | spam. | | Is there any way to solve the problem. I get about 6 every day. | | | | My OS Centos 5 | | for mail delivery Postfix , Procmail and spamassassin latest version | | i) did you make sure you don't have an open relay (i.e., postfix only | sends email for users that are allowed to)? | | ii) are you sure those emails originate from _your_ server? maybe it's | just backscatter [0], showing headers would help to check. | | HTH & regards, | | timo | | [0] -- http://en.wikipedia.org/wiki/Backscatter_(e-mail) | | | I appreciate you help. | | | | Thanks in advance | | hateSpam -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFKHopffg746kcGBOwRAlt7AJ9ezcoeQDYSyFJXbB07d8e86KS8aACaAw6I uGxA35LcSnm0lFQh47tQCRM= =UgWj -END PGP SIGNATURE-
Re: Email from myself to myself
Thanks for reply. i) How can I check ( open relay ) in postfix. I looked at but could not find. ii) When I check the header all information is about our server. I can not see any external server. the header is some thing like bellow: From: myn...@example.com Subject: RE: 28.5.2009 ID07076 79% 0FF on PFIZER ! Date: 28 May 2009 06:56:49 BST To: myn...@example.com Return-Path: X-Original-To: myn...@example.com Delivered-To: myn...@example.com Received: from 122.161.59.196 (unknown [122.161.59.196]) by server.example.com (Postfix) with SMTP id 8AA5D448C1D for ; Thu, 28 May 2009 06:56:49 +0100 (BST) X-Originating-Ip: [14.960.49.68] X-Originating-Email:[myn...@example.com] X-Sender: myn...@example.com Mime-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20090528111649.8aaf67888...@server.example.com> Thanks hateSpam Timo Schoeler-2 wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > thus hateSpam spake: > | Dear All, > | I am getting email from myself to my self all Pills adverts and it is > spam. > | Is there any way to solve the problem. I get about 6 every day. > | > | My OS Centos 5 > | for mail delivery Postfix , Procmail and spamassassin latest version > > i) did you make sure you don't have an open relay (i.e., postfix only > sends email for users that are allowed to)? > > ii) are you sure those emails originate from _your_ server? maybe it's > just backscatter [0], showing headers would help to check. > > HTH & regards, > > timo > > [0] -- http://en.wikipedia.org/wiki/Backscatter_(e-mail) > > | I appreciate you help. > | > | Thanks in advance > | hateSpam > > > > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.4.5 (GNU/Linux) > Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org > > iD8DBQFKHnb3fg746kcGBOwRAvTZAJ4y5SYTd2PIw6yC+JPt25d+iT4vdgCgvkz3 > 3pDbhdKjpSmy8ksOdErYaIs= > =UN/E > -END PGP SIGNATURE- > > -- View this message in context: http://www.nabble.com/Email-from-myself-to-myself-tp23759955p23760867.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Email from myself to myself
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 thus hateSpam spake: | Dear All, | I am getting email from myself to my self all Pills adverts and it is spam. | Is there any way to solve the problem. I get about 6 every day. | | My OS Centos 5 | for mail delivery Postfix , Procmail and spamassassin latest version i) did you make sure you don't have an open relay (i.e., postfix only sends email for users that are allowed to)? ii) are you sure those emails originate from _your_ server? maybe it's just backscatter [0], showing headers would help to check. HTH & regards, timo [0] -- http://en.wikipedia.org/wiki/Backscatter_(e-mail) | I appreciate you help. | | Thanks in advance | hateSpam -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFKHnb3fg746kcGBOwRAvTZAJ4y5SYTd2PIw6yC+JPt25d+iT4vdgCgvkz3 3pDbhdKjpSmy8ksOdErYaIs= =UN/E -END PGP SIGNATURE-
Email from myself to myself
Dear All, I am getting email from myself to my self all Pills adverts and it is spam. Is there any way to solve the problem. I get about 6 every day. My OS Centos 5 for mail delivery Postfix , Procmail and spamassassin latest version I appreciate you help. Thanks in advance hateSpam -- View this message in context: http://www.nabble.com/Email-from-myself-to-myself-tp23759955p23759955.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
