White listing yahoo groups

[Bill Moseley]

I keep getting my yahoo groups account shut down because of too many
bounces.  For one thing, their mail server is listed:

Blocked - see 

Is there a recommended method for dealing with mailing lists where the
mail may come from any number of mail servers?

Should I try and white list the hosts?  Or better to give a large
negative score?

Can their use of "DomainKeys" be used in my scoring?


-- 
Bill Moseley
[EMAIL PROTECTED]

Re: White listing yahoo groups

[Bill Moseley]

On Tue, Nov 14, 2006 at 07:01:12AM -0800, Bill Moseley wrote:
> Can their use of "DomainKeys" be used in my scoring?

Sorry, that was more of "*should* their use..." -- I'm not clear
on the use of Mail::SpamAssassin::Plugin::DomainKeys.

-- 
Bill Moseley
[EMAIL PROTECTED]

Re: White listing yahoo groups

[David Baron]

On Tuesday 14 November 2006 17:01, Bill Moseley wrote:
> I keep getting my yahoo groups account shut down because of too many
> bounces.  For one thing, their mail server is listed:
>
> Blocked - see 
>
> Is there a recommended method for dealing with mailing lists where the
> mail may come from any number of mail servers?
>
> Should I try and white list the hosts?  Or better to give a large
> negative score?
>
> Can their use of "DomainKeys" be used in my scoring?

Unless YOUR machine is bouncing them, your SA will not help. Spamcap is 
usually the culprit and is being used by Yahoo.

Re: White listing yahoo groups

[SM]

At 07:01 14-11-2006, Bill Moseley wrote:

Should I try and white list the hosts?  Or better to give a large
negative score?


Yes, if you don't receive spam from these hosts.


Can their use of "DomainKeys" be used in my scoring?


See whitelist_from_dk [EMAIL PROTECTED] example.com

The signing domain (last parameter) is optional.

Regards,
-sm 

Re: White listing yahoo groups

[Bill Moseley]

On Tue, Nov 14, 2006 at 05:42:58PM +0200, David Baron wrote:
> On Tuesday 14 November 2006 17:01, Bill Moseley wrote:
> > I keep getting my yahoo groups account shut down because of too many
> > bounces.  For one thing, their mail server is listed:
> >
> > Blocked - see 
> >
> > Is there a recommended method for dealing with mailing lists where the
> > mail may come from any number of mail servers?
> >
> > Should I try and white list the hosts?  Or better to give a large
> > negative score?
> >
> > Can their use of "DomainKeys" be used in my scoring?
> 
> Unless YOUR machine is bouncing them, your SA will not help. Spamcap is 
> usually the culprit and is being used by Yahoo.

Yes, it is my machine rejecting the mail that is flagged spam.
And when I reject too many messages Yahoo's mailing list software
considers my email non-working and stops delivering list messages.

I guess I'm just curious how others deal with mailing lists.  I
suspect just like any other mail -- if a message has a high enough
spam score then reject it.

One problem is yahoo's machine is in spamcop, which might happen
more often due to the volume of mail they send out.  So, I might want
to reduce the score for mail that comes from any of the yahoo mail
servers.  Although, I'm not clear how to know that the mail is from
yahoo (or any other larger list provider).

For example, can I say ignore spamcop's report if the connecting
server's reverse lookup includes "yahoo.com"?  Not sure how SA would
know the connecting server (I'm running SA from an Exim4 ACL, by the
way).

IIRC, the problem with Yahoo is that if you belong to, say, 20 lists
and if one of those lists sends a lot of spam that gets rejected then
your address is considered non-working resulting in all 20 lists
stopping.




-- 
Bill Moseley
[EMAIL PROTECTED]

Re: White listing yahoo groups

[qqqq]

whitelist_from_rcvd *.mail.mud.yahoo.com *.bullet.scd.yahoo.com

Re: White listing yahoo groups

[Benny Pedersen]

On Tue, November 14, 2006 19:21, Bill Moseley wrote:

>> Unless YOUR machine is bouncing them, your SA will not help. Spamcap is
>> usually the culprit and is being used by Yahoo.

ip is listed so:

Resolved 69.147.64.135 to n20c.bullet.sp1.yahoo.com.
[n20c.bullet.sp1.yahoo.com. has 1 MX record .(0)]

why hava a mx on a reverse dns ?, silly :-)

> Yes, it is my machine rejecting the mail that is flagged spam.
> And when I reject too many messages Yahoo's mailing list software
> considers my email non-working and stops delivering list messages.
>
> I guess I'm just curious how others deal with mailing lists.  I
> suspect just like any other mail -- if a message has a high enough
> spam score then reject it.

i whitelist with trusted_networks

> One problem is yahoo's machine is in spamcop, which might happen
> more often due to the volume of mail they send out.  So, I might want
> to reduce the score for mail that comes from any of the yahoo mail
> servers.  Although, I'm not clear how to know that the mail is from
> yahoo (or any other larger list provider).

spamcop should filter out maillist servers !

> For example, can I say ignore spamcop's report if the connecting
> server's reverse lookup includes "yahoo.com"?  Not sure how SA would
> know the connecting server (I'm running SA from an Exim4 ACL, by the
> way).

add ALL yahoo.com outgoing ip to trusted_networks in spamassassin solves it,
but who knows there ip's ?

> IIRC, the problem with Yahoo is that if you belong to, say, 20 lists
> and if one of those lists sends a lot of spam that gets rejected then
> your address is considered non-working resulting in all 20 lists
> stopping.

it have to be this way, since yahoo can not see if the mailbox is working or
just a spam checker that does not work :(

-- 
This message was sent using 100% recycled spam mails.

Re: White listing yahoo groups

[Benny Pedersen]

On Tue, November 14, 2006 19:25,  wrote:
> whitelist_from_rcvd *.mail.mud.yahoo.com *.bullet.scd.yahoo.com

wish it was that simple :(

spamassassin will still check spamcop

but may not say its spam and thus accept it

-- 
This message was sent using 100% recycled spam mails.

Re: White listing yahoo groups

[Kelson]

Benny Pedersen wrote:

i whitelist with trusted_networks

...

add ALL yahoo.com outgoing ip to trusted_networks in spamassassin solves it,
but who knows there ip's ?


That probably isn't doing what you think it is.

trusted_networks isn't a whitelist.  It doesn't mean you trust them not 
to send spam.  It just means you trust the data in their Received headers.


It does, however, push RBL checks out one level, so you'll be checking 
RBLs against the original senders, not against Yahoo.  But it won't 
reduce the score on messages that trip your threshold based on content 
or header rules.


--
Kelson Vibber
SpeedGate Communications 

Re: White listing yahoo groups

[David B Funk]

On Tue, 14 Nov 2006,  wrote:

> whitelist_from_rcvd *.mail.mud.yahoo.com *.bullet.scd.yahoo.com
>

Um shouldn't that first component be in address format?
EG:

whitelist_from_rcvd [EMAIL PROTECTED]  yahoo.com


Also that second argument doesn't need that '*'. It already
patern matches against the substring of the sending domain name.

If you want to "shotgun" whitelist all stuff coming from yahoo
you could use:

whitelist_from_rcvd [EMAIL PROTECTED]   yahoo.com


Of course, whitelist_from_rcvd demands that your DNS and
trusted_networks be functional.

Dave


-- 
Dave Funk  University of Iowa
College of Engineering
319/335-5751   FAX: 319/384-0549   1256 Seamans Center
Sys_admin/Postmaster/cell_adminIowa City, IA 52242-1527
#include 
Better is not better, 'standard' is better. B{

Re: White listing yahoo groups

[Andrew Hodgson]

On Tue, 14 Nov 2006 10:21:02 -0800, Bill Moseley <[EMAIL PROTECTED]>
wrote:

[...]

>Yes, it is my machine rejecting the mail that is flagged spam.
>And when I reject too many messages Yahoo's mailing list software
>considers my email non-working and stops delivering list messages.

Snap!  I have the same issue here, I reject with a high score, and it
only takes one to put it into bounce mode.  Also, they never let you
know you are bouncing until like the next couple of days.

The other problem is I have a system here which does some checks on
the SMTP transaction and performs checks which gets to SA, and due to
the way Yahoo delivers the messages to multiple recipients on the same
domain (through sending the message multiple times in the same SMTP
transaction) this caused problems as well.
>
>I guess I'm just curious how others deal with mailing lists.  I
>suspect just like any other mail -- if a message has a high enough
>spam score then reject it.

I am going to try some of the other messages in this thread - may take
a while though, as I have to wait for one to trip the system.

Andrew.

Re: White listing yahoo groups

[Benny Pedersen]

On Tue, November 14, 2006 19:00, SM wrote:

> See whitelist_from_dk [EMAIL PROTECTED] example.com

for me this is not possible with domainkeys

but only with dkim

-- 
This message was sent using 100% recycled spam mails.