Re: Reporting gmail spam to Google

2016-05-19 Thread Reindl Harald



Am 19.05.2016 um 17:44 schrieb Joseph Brennan:


Reindl Harald  wrote:


"doing those best" must be the reason for a testing-SPF instead "-all"
come on..



Remember that the DMARC people changed Internet Message Format so that
"From:" no longer shows the person who wrote the message but must "align"
with the mail system that sent the message?


remember all the problems it brings like for mailing-lists as this one?


Well, they also changed the SPF protocol so that -all should not be used.
Using ~all causes processing to continue through DKIM and DMARC, and then
the failure gets reported to the "ruf" address. Using -all is just for
SPF-only people


ah so i need to implement on my side DMARC to give them the benefit of 
DMARC reports while i could with a proper setup JUST REJECT a froged 
message long before SpamAssassin - what a improvement


anyways, your whole DMARC stuff has *nothing* to do with what you 
responded original because it don't and can't change ANYTHING about spam 
from gmail accounts, they pass SPF/DKIM/DMARC


so what do you try to explain me?

scoll up in the thread where you startet to respond about DMARC and then 
try to get the context of the thread - hint: it has NOTHING to do with 
forged mail from whatever servers




signature.asc
Description: OpenPGP digital signature


Re: Reporting gmail spam to Google

2016-05-19 Thread Joseph Brennan

Reindl Harald  wrote:

> "doing those best" must be the reason for a testing-SPF instead "-all"
> come on..


Remember that the DMARC people changed Internet Message Format so that
"From:" no longer shows the person who wrote the message but must "align"
with the mail system that sent the message?

Well, they also changed the SPF protocol so that -all should not be used.
Using ~all causes processing to continue through DKIM and DMARC, and then
the failure gets reported to the "ruf" address. Using -all is just for
SPF-only people.

Joseph Brennan
Columbia University Information Technology






Re: Reporting gmail spam to Google

2016-05-18 Thread Reindl Harald



Am 18.05.2016 um 20:03 schrieb Charles Sprickman:



On May 18, 2016, at 9:06 AM, Reindl Harald  wrote:



Am 18.05.2016 um 15:00 schrieb Emiliano Vazquez:

El 18/05/16 a las 05:44, Reindl Harald escribió:

Is there any address that I can forward gmail spam to google for
reporting?


ab...@google.com should be the address (the mail was delivered to your
network by *.google.com host, wasn't it?)

HI guys.


Google only let you send 300 e-mails per day to another domains if you
are using free @gmail account. Maybe Google Apps can have more than
that. Do you receive a lot of spam from the same account?


not usually but that's not the point - the point is how they behave when you 
report spreaded phising over different accounts reaching a lot of your 
customers and don't change the fact that a large part of junk making it to SA 
at all comes from large freemail providers including google while mostly 
aol/yahoo



This stems from Hooli’s, oops, I mean Google’s culture.  They build things 
correctly.  Users know nothing.  No feedback is needed


no - it's like for most large companies

taking a lot of resposibility but not able to handle it
starts typically above 20 employes



signature.asc
Description: OpenPGP digital signature


Re: Reporting gmail spam to Google

2016-05-18 Thread Charles Sprickman

> On May 18, 2016, at 9:06 AM, Reindl Harald  wrote:
> 
> 
> 
> Am 18.05.2016 um 15:00 schrieb Emiliano Vazquez:
>> El 18/05/16 a las 05:44, Reindl Harald escribió:
 Is there any address that I can forward gmail spam to google for
 reporting?
>>> 
>>> ab...@google.com should be the address (the mail was delivered to your
>>> network by *.google.com host, wasn't it?)
>> HI guys.
>> 
>> 
>> Google only let you send 300 e-mails per day to another domains if you
>> are using free @gmail account. Maybe Google Apps can have more than
>> that. Do you receive a lot of spam from the same account?
> 
> not usually but that's not the point - the point is how they behave when you 
> report spreaded phising over different accounts reaching a lot of your 
> customers and don't change the fact that a large part of junk making it to SA 
> at all comes from large freemail providers including google while mostly 
> aol/yahoo
> 

This stems from Hooli’s, oops, I mean Google’s culture.  They build things 
correctly.  Users know nothing.  No feedback is needed.


signature.asc
Description: Message signed with OpenPGP using GPGMail


Re: Reporting gmail spam to Google

2016-05-18 Thread Joe Quinn

On 5/18/2016 11:10 AM, Alarig Le Lay wrote:

On Thu May 19 00:00:31 2016, Byung-Hee HWANG (황병희) wrote:

As far as i know, they are doing those best to reduce spam by DMARC.

DMARC is used to prevent incomming spam, not outgoing.

Well to be more specific, DMARC allows forgeries to be aggressively 
rejected. Doesn't help a bit when your users are sending spam.


Re: Reporting gmail spam to Google

2016-05-18 Thread Reindl Harald



Am 18.05.2016 um 17:00 schrieb Byung-Hee HWANG:

On 2016년 5월 18일 오후 10시 6분 28초 GMT+09:00, Reindl Harald  
wrote:

not usually but that's not the point - the point is how they behave
when
you report spreaded phising over different accounts reaching a lot of
your customers and don't change the fact that a large part of junk
making it to SA at all comes from large freemail providers including
google while mostly aol/yahoo


As far as i know, they are doing those best to reduce spam by DMARC


"doing those best" must be the reason for a testing-SPF instead "-all"
come on..

gmail.com.  300 IN  TXT "v=spf1 
redirect=_spf.google.com"


_spf.google.com.300 IN  TXT "v=spf1 
include:_netblocks.google.com include:_netblocks2.google.com 
include:_netblocks3.google.com ~all"




signature.asc
Description: OpenPGP digital signature


Re: Reporting gmail spam to Google

2016-05-18 Thread Alarig Le Lay
On Thu May 19 00:00:31 2016, Byung-Hee HWANG (황병희) wrote:
> As far as i know, they are doing those best to reduce spam by DMARC.

DMARC is used to prevent incomming spam, not outgoing.

-- 
alarig


signature.asc
Description: Digital signature


Re: Reporting gmail spam to Google

2016-05-18 Thread Emiliano Vazquez

El 18/05/16 a las 10:06, Reindl Harald escribió:
not usually but that's not the point - the point is how they behave 
when you report spreaded phising over different accounts reaching a 
lot of your customers and don't change the fact that a large part of 
junk making it to SA at all comes from large freemail providers 
including google while mostly aol/yahoo

You got a point! This is totally true.


Best regards.


Emiliano.




Re: Reporting gmail spam to Google

2016-05-18 Thread 황병희
On 2016년 5월 18일 오후 10시 6분 28초 GMT+09:00, Reindl Harald  
wrote:
>
>
>Am 18.05.2016 um 15:00 schrieb Emiliano Vazquez:
>> El 18/05/16 a las 05:44, Reindl Harald escribió:
 Is there any address that I can forward gmail spam to google for
 reporting?
>>>
>>> ab...@google.com should be the address (the mail was delivered to
>your
>>> network by *.google.com host, wasn't it?)
>> HI guys.
>>
>>
>> Google only let you send 300 e-mails per day to another domains if
>you
>> are using free @gmail account. Maybe Google Apps can have more than
>> that. Do you receive a lot of spam from the same account?
>
>not usually but that's not the point - the point is how they behave
>when 
>you report spreaded phising over different accounts reaching a lot of 
>your customers and don't change the fact that a large part of junk 
>making it to SA at all comes from large freemail providers including 
>google while mostly aol/yahoo

As far as i know, they are doing those best to reduce spam by DMARC.
-- 
^고맙습니다 감사합니다_^))//


Re: Reporting gmail spam to Google

2016-05-18 Thread Reindl Harald



Am 18.05.2016 um 15:00 schrieb Emiliano Vazquez:

El 18/05/16 a las 05:44, Reindl Harald escribió:

Is there any address that I can forward gmail spam to google for
reporting?


ab...@google.com should be the address (the mail was delivered to your
network by *.google.com host, wasn't it?)

HI guys.


Google only let you send 300 e-mails per day to another domains if you
are using free @gmail account. Maybe Google Apps can have more than
that. Do you receive a lot of spam from the same account?


not usually but that's not the point - the point is how they behave when 
you report spreaded phising over different accounts reaching a lot of 
your customers and don't change the fact that a large part of junk 
making it to SA at all comes from large freemail providers including 
google while mostly aol/yahoo




signature.asc
Description: OpenPGP digital signature


Re: Reporting gmail spam to Google

2016-05-18 Thread Emiliano Vazquez

El 18/05/16 a las 05:44, Reindl Harald escribió:

Is there any address that I can forward gmail spam to google for
reporting?


ab...@google.com should be the address (the mail was delivered to your
network by *.google.com host, wasn't it?) 

HI guys.


Google only let you send 300 e-mails per day to another domains if you 
are using free @gmail account. Maybe Google Apps can have more than 
that. Do you receive a lot of spam from the same account?


Best regards.

Emiliano.



Re: Reporting gmail spam to Google

2016-05-18 Thread Reindl Harald



Am 18.05.2016 um 09:32 schrieb Matus UHLAR - fantomas:

Am 17.05.2016 um 20:30 schrieb Matus UHLAR - fantomas:

On 17.05.16 09:10, Marc Perkel wrote:

Is there any address that I can forward gmail spam to google for
reporting?


ab...@google.com should be the address (the mail was delivered to your
network by *.google.com host, wasn't it?)


On 17.05.16 21:41, Reindl Harald wrote:

and you did ever get a response there exept "go too googlegroups and
read this and that" from a bot?


last time I remember the response was that they care of bugreports...
what you mean was iirc something like "for more info go to groups..."


i made some abuse reports to google and got back sometuing in the style 
"this is a autoreply, this mailbox is not read, go here and there", 
likely 3 years ago, maybe they changed their attitude in the meantime




signature.asc
Description: OpenPGP digital signature


Re: Reporting gmail spam to Google

2016-05-18 Thread Matus UHLAR - fantomas

Am 17.05.2016 um 20:30 schrieb Matus UHLAR - fantomas:

On 17.05.16 09:10, Marc Perkel wrote:

Is there any address that I can forward gmail spam to google for
reporting?


ab...@google.com should be the address (the mail was delivered to your
network by *.google.com host, wasn't it?)


On 17.05.16 21:41, Reindl Harald wrote:
and you did ever get a response there exept "go too googlegroups and 
read this and that" from a bot?


last time I remember the response was that they care of bugreports...
what you mean was iirc something like "for more info go to groups..."
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
On the other hand, you have different fingers. 


Re: Reporting gmail spam to Google

2016-05-17 Thread Reindl Harald



Am 17.05.2016 um 20:30 schrieb Matus UHLAR - fantomas:

On 17.05.16 09:10, Marc Perkel wrote:

Is there any address that I can forward gmail spam to google for
reporting?


ab...@google.com should be the address (the mail was delivered to your
network by *.google.com host, wasn't it?)


and you did ever get a response there exept "go too googlegroups and 
read this and that" from a bot?




signature.asc
Description: OpenPGP digital signature


Re: Reporting gmail spam to Google

2016-05-17 Thread Matus UHLAR - fantomas

On 17.05.16 09:10, Marc Perkel wrote:

Is there any address that I can forward gmail spam to google for reporting?


ab...@google.com should be the address (the mail was delivered to your
network by *.google.com host, wasn't it?)
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fighting for peace is like fucking for virginity...


Re: Reporting gmail spam to Google

2016-05-17 Thread John Hardin

On Tue, 17 May 2016, Marc Perkel wrote:


Is there any address that I can forward gmail spam to google for reporting?


Theoretically  


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  If you ask amateurs to act as front-line security personnel,
  you shouldn't be surprised when you get amateur security.
-- Bruce Schneier
---
 147 days since the first successful real return to launch site (SpaceX)