Re: linkedin invitation spam

2010-12-14 Thread Per Jessen
Martin Gregorie wrote: I don't remotely intend to go vigilante: I don't know how you got that from what I said, which I thought boiled down to: a) If an acquaintance asks you become a member that is not a problem. In fact, acquaintance or otherwise, that is the whole idea :-) b) If a

Re: Two newish RBLs; NXDOMAIN question

2010-12-14 Thread RW
On Tue, 14 Dec 2010 08:50:17 +0200 Oguz Yilmaz oguzyilmazl...@gmail.com wrote: On Mon, Dec 13, 2010 at 7:21 PM, Len Conrad lcon...@go2france.com wrote: Are you sure? At the moment I can not resolv the name truncate.gbudb.net. that's correct, and OK. and you can't resolve

DNSBL for email addresses?

2010-12-14 Thread Marc Perkel
Are there any DNSBLs out there based on email addresses? Since you can't use an @ in a DNS lookup - how would you do DNSBL on email addresses? Is there a standard? -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400

Re: DNSBL for email addresses?

2010-12-14 Thread Yet Another Ninja
On 2010-12-14 15:28, Marc Perkel wrote: Are there any DNSBLs out there based on email addresses? nope Is there a standard? nope

Re: DNSBL for email addresses?

2010-12-14 Thread Daniel McDonald
On 12/14/10 8:28 AM, Marc Perkel supp...@junkemailfilter.com wrote: Are there any DNSBLs out there based on email addresses? No. There was an experimental list for a while. Since you can't use an @ in a DNS lookup - how would you do DNSBL on email addresses? # This plugin creates rbl

Re: Two newish RBLs; NXDOMAIN question

2010-12-14 Thread Benny Pedersen
On tir 14 dec 2010 07:50:17 CET, Oguz Yilmaz wrote and you can't resolve zen.spamhaus.org, either.  :) Does it mean they are closed? rndc querylog spamassassin -t spammsg rndc querylog see log above works when running bin9 -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Re: DNSBL for email addresses?

2010-12-14 Thread Benny Pedersen
On tir 14 dec 2010 15:28:54 CET, Marc Perkel wrote Are there any DNSBLs out there based on email addresses? Since you can't use an @ in a DNS lookup - how would you do DNSBL on email addresses? Is there a standard? no std, but there was a test with emailbl, google it -- xpoint

Comment - GFI/SORBS

2010-12-14 Thread Nigel Frankcom
Hi All, Is sorbs going to be continued as a scoring option in SA? Having hit yet more problems with them I've zeroed their scoring. I found this a couple of days ago, maybe it can add weight. http://blog.wordtothewise.com/2010/12/gfi-sorbs-considered-harmful/ Best to all Nigel

Re: Comment - GFI/SORBS

2010-12-14 Thread corpus.defero
On Tue, 2010-12-14 at 16:58 +, Nigel Frankcom wrote: Hi All, Is sorbs going to be continued as a scoring option in SA? Having hit yet more problems with them I've zeroed their scoring. ... I hope so. I find SORBS wonderful in dealing with those troublesome mailers that have managed to

Re: blacklist.mailrelay.att.net

2010-12-14 Thread Philip Prindeville
On 12/13/10 2:14 AM, Giampaolo Tomassoni wrote: Le 12/12/2010 19:23, Giampaolo Tomassoni a écrit : How does it work? I just got blocked by the ATT's blacklist (in contacting ab...@att.com, besides...), but I'm pretty sure my MX is not an open relay or other kind of nifty thing. Maybe ATT

Re: Two newish RBLs; NXDOMAIN question

2010-12-14 Thread Oguz Yilmaz
Thanks, a basic tcpdump revealed the method of query and response. -- Oguz YILMAZ On Tue, Dec 14, 2010 at 6:47 PM, Benny Pedersen m...@junc.org wrote: On tir 14 dec 2010 07:50:17 CET, Oguz Yilmaz wrote and you can't resolve zen.spamhaus.org, either.  :) Does it mean they are closed?

perl-Net-Patricia-1.19 is out

2010-12-14 Thread Philip Prindeville
It's been released for F13 and F14. And of course, it's upstream on CPAN. It's the promotion of the development version 1.18_81 to production.

Re: Two newish RBLs; NXDOMAIN question

2010-12-14 Thread Benny Pedersen
On tir 14 dec 2010 18:55:12 CET, Oguz Yilmaz wrote Thanks, a basic tcpdump revealed the method of query and response. i like comal more then basic, but glad to be of help -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

RE: blacklist.mailrelay.att.net

2010-12-14 Thread Giampaolo Tomassoni
I would strongly encourage your ISP to clean up their act by adding an excursion detection system, that watches for bursty outbound traffic patterns, like a sudden spike in outbound SMTP or HTTP connections to a wide spread of addresses. Is Aruba.it so poorly reputed? g -Philip

Re: linkedin invitation spam

2010-12-14 Thread mouss
Le 13/12/2010 23:45, Martin Gregorie a écrit : On Mon, 2010-12-13 at 22:19 +0100, mouss wrote: Le 13/12/2010 10:38, Martin Gregorie a écrit : As others have said, it depends who sent it and why. Invitations sent specifically by people who know you aren't spam, but I've heard it said several

Loading receiver within my spamassassin plugin.

2010-12-14 Thread Massimiliano Giovine
I wrote a plugin that tries to do some operation on the receiver mail address before the message is delivered. How can i retrieve such address? $mailTo = $pms-get('EnvelopeTo:addr'); dbg(EvelopeTo-Addr read from mail $mailTo); and i have this output on the log: Tue Dec 14 22:45:54 2010 [2807]

Re: Loading receiver within my spamassassin plugin.

2010-12-14 Thread Karsten Bräckelmann
On Tue, 2010-12-14 at 22:51 +0100, Massimiliano Giovine wrote: I wrote a plugin that tries to do some operation on the receiver mail address before the message is delivered. Operation? You're not trying to change it, are you? How can i retrieve such address? $mailTo =

Re: Loading receiver within my spamassassin plugin.

2010-12-14 Thread Massimiliano Giovine
# I guess the actual header, if any, depends on your MTA and glue. The # whitelist_to option in the Conf documentation has a list with likely # candidates. I use Postfix. What Conf do you talk about? I have to compare it with a list in a database and with a custom header but this is not

Re: Loading receiver within my spamassassin plugin.

2010-12-14 Thread Karsten Bräckelmann
Fixicated the copy-n-paste blob to reply... On Tue, 2010-12-14 at 23:08 +0100, Massimiliano Giovine wrote: 2010/12/14 Karsten Bräckelmann guent...@rudersport.de: How can i retrieve such address? $mailTo = $pms-get('EnvelopeTo:addr'); dbg(EvelopeTo-Addr read from mail $mailTo);

Re: DNSBL for email addresses?

2010-12-14 Thread Big Wave Dave
On Tue, Dec 14, 2010 at 6:28 AM, Marc Perkel supp...@junkemailfilter.com wrote: Are there any DNSBLs out there based on email addresses? Since you can't use an @ in a DNS lookup - how would you do DNSBL on email addresses? Is there a standard? -- Marc Perkel - Sales/Support While not an

Re: DNSBL for email addresses?

2010-12-14 Thread Marc Perkel
On 12/14/2010 2:38 PM, Big Wave Dave wrote: On Tue, Dec 14, 2010 at 6:28 AM, Marc Perkel supp...@junkemailfilter.com wrote: Are there any DNSBLs out there based on email addresses? Since you can't use an @ in a DNS lookup - how would you do DNSBL on email addresses? Is there a standard? --

Re: DNSBL for email addresses?

2010-12-14 Thread Cedric Knight
On 14/12/10 14:28, Marc Perkel wrote: Are there any DNSBLs out there based on email addresses? Since you can't use an @ in a DNS lookup Actually, you can use '@' in a lookup. You just can't use it in a hostname. Or you could convert the '@' to a '.' as is the format still used in SOA records.

Re: DNSBL for email addresses?

2010-12-14 Thread John Hardin
On Tue, 14 Dec 2010, Cedric Knight wrote: So a hash is best, Agreed. and I'd suggest SHA1 over MD5. Just out of curiosity, why? An MD5 hash is shorter than an SHA hash (an important consideration when you're making lots of DNS queries of the hash), MD5 is computationally lighter than

Re: DNSBL for email addresses?

2010-12-14 Thread RW
On Tue, 14 Dec 2010 15:52:28 -0800 (PST) John Hardin jhar...@impsec.org wrote: On Tue, 14 Dec 2010, Cedric Knight wrote: So a hash is best, Agreed. and I'd suggest SHA1 over MD5. Just out of curiosity, why? An MD5 hash is shorter than an SHA hash (an important consideration when

Re: Comment - GFI/SORBS

2010-12-14 Thread Bart Schaefer
http://blog.wordtothewise.com/2010/12/gfi-sorbs-considered-harmful-part-5/

Re: blacklist.mailrelay.att.net

2010-12-14 Thread Philip Prindeville
On 12/14/10 11:31 AM, Giampaolo Tomassoni wrote: I would strongly encourage your ISP to clean up their act by adding an excursion detection system, that watches for bursty outbound traffic patterns, like a sudden spike in outbound SMTP or HTTP connections to a wide spread of addresses. Is

Re: DNSBL for email addresses?

2010-12-14 Thread Philip Prindeville
On 12/14/10 3:35 PM, Cedric Knight wrote: On 14/12/10 14:28, Marc Perkel wrote: Are there any DNSBLs out there based on email addresses? Since you can't use an @ in a DNS lookup Actually, you can use '@' in a lookup. You just can't use it in a hostname. Or you could convert the '@' to a '.'

Re: Comment - GFI/SORBS

2010-12-14 Thread Jason Bertoch
On 12/14/2010 8:06 PM, Bart Schaefer wrote: http://blog.wordtothewise.com/2010/12/gfi-sorbs-considered-harmful-part-5/ I've seen the headaches of getting off SORBS, but how did you really end up there? While I agree that SORBS is not reliable enough for use at the MTA level, I've not seen

Re: Comment - GFI/SORBS

2010-12-14 Thread corpus.defero
Ultimately, this seems to be more of a witch hunt against SORBS than a SA issue. Although I'm not opposed to a SORBS witch hunt, I don't think it belongs here. Indeed, and it's Lynford and his money grabbing cronies mostly behind it - hence it lacks sophistication.

Re: DNSBL for email addresses?

2010-12-14 Thread Oguz Yilmaz
You can try right hand side black lists (RHSBL) for domain part. On Tue, Dec 14, 2010 at 4:28 PM, Marc Perkel supp...@junkemailfilter.com wrote: Are there any DNSBLs out there based on email addresses? Since you can't use an @ in a DNS lookup - how would you do DNSBL on email addresses? Is

Re: DNSBL for email addresses?

2010-12-14 Thread David B Funk
On Tue, 14 Dec 2010, Marc Perkel wrote: Are there any DNSBLs out there based on email addresses? Since you can't use an @ in a DNS lookup - how would you do DNSBL on email addresses? Is there a standard? Why do you say Since you can't use an @ in a DNS lookup?? Unless you're using obsolete

SPF_PASS doesn't trigered

2010-12-14 Thread Nikolay Shopik
I have domain hosted at google apps, and my domain have recomended by google txt record v=spf1 include:_spf.google.com ~all. So far when I receive mail from this domain spamassassin doesn't trigger rule SPF_PASS nor SPF_SOFTFAIL, is this normal? I'm running 3.3.1 version