Irregular Test Reports in SA?

2015-03-30 Thread grhoderick
First, apologies in advance, I know this list is for seasoned users. I'm a consumer—not an administrator by any means—but posting here in hopes that the SA focus of the list will provide a clear answer. I'm on a shared web hosting plan and receiving an inordinate amount of very obvious spam. SA

Re: Irregular Test Reports in SA?

2015-03-30 Thread Benny Pedersen
grhoderick skrev den 2015-03-30 16:12: Example of the difference in output: http://pastebin.com/ph6wZw2R http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block funny that zen.spamhaus.org still works Thanks very much for your help! ask your server admins to solve this dns problem,

Re: How to automatically train each users Bayes?

2015-03-30 Thread James Michael Keller
Here is what I'm using to do the same globally based on each users mail, but it could be tweaked to do per user.This happens to be a family only server, so I'm generally doing the spam/ham review for each user as needed: root@omega:/usr/local/bin# more sa-learn-systemwide #!/bin/sh # #

Re: Uptick in spam

2015-03-30 Thread Kris Deugau
David Jones wrote: The invaluement RBL is not expensive either and it is awesome. We pay thousands per year for a Spamhaus feed because of our volume and mailboxes. The invaluement RBL is only hundreds per year and it's almost as good as Spamhaus Zen. Seconded; this is exactly what

Re: Uptick in spam

2015-03-30 Thread Rob McEwen
On 3/30/2015 11:49 AM, Kris Deugau wrote: Seconded; this is exactly what we've been finding. Invaluement is a great complement to Spamhaus for a fraction of the cost. I wouldn't put it as a front-line reject DNSBL, because some of the things that have been listed are not what I would class,

Re: Uptick in spam

2015-03-30 Thread Rob McEwen
On 3/30/2015 1:19 PM, Kris Deugau wrote: The cases I can recall are more along the lines of grey-hat ESPs who pick up a spammer client for a while, Kris, The next time you run across this and think it might be causing a little too much collateral damage (in spite of the spamming), let me

Re: dangers of email forgery

2015-03-30 Thread Reindl Harald
Am 30.03.2015 um 19:55 schrieb Jude DaShiell: One of them is that spammers forge your address so much you get your account blacklisted and end up having to have it shut down. That happened to me and the jdash...@shellworld.net account. Anyone doing a google search on shellworld.net

dangers of email forgery

2015-03-30 Thread Jude DaShiell
One of them is that spammers forge your address so much you get your account blacklisted and end up having to have it shut down. That happened to me and the jdash...@shellworld.net account. Anyone doing a google search on shellworld.net blacklisted will find my former shellworld.net address

Re: Uptick in spam

2015-03-30 Thread Kris Deugau
Rob McEwen wrote: On 3/30/2015 11:49 AM, Kris Deugau wrote: Seconded; this is exactly what we've been finding. Invaluement is a great complement to Spamhaus for a fraction of the cost. I wouldn't put it as a front-line reject DNSBL, because some of the things that have been listed are not

Re: dangers of email forgery

2015-03-30 Thread Reindl Harald
Am 30.03.2015 um 21:26 schrieb Martin Gregorie: On Mon, 2015-03-30 at 20:07 +0100, RW wrote: On Mon, 30 Mar 2015 13:55:52 -0400 (EDT) Jude DaShiell wrote: One of them is that spammers forge your address so much you get your account blacklisted and end up having to have it shut down. That

Re: dangers of email forgery

2015-03-30 Thread David F. Skoll
On Mon, 30 Mar 2015 21:47:10 +0200 Reindl Harald h.rei...@thelounge.net wrote: but i doubt that exchange don't know it's valid rcpt's and always backscatters with no way to disable that behavior - even in case of microsoft i doubt Google specifically for Exchange 2013. AFAIK, it's

Re: dangers of email forgery

2015-03-30 Thread RW
On Mon, 30 Mar 2015 13:55:52 -0400 (EDT) Jude DaShiell wrote: One of them is that spammers forge your address so much you get your account blacklisted and end up having to have it shut down. That happened to me and the jdash...@shellworld.net account. AFAIK there is no blacklist that lists

Re: dangers of email forgery

2015-03-30 Thread Reindl Harald
Am 30.03.2015 um 21:07 schrieb RW: On Mon, 30 Mar 2015 13:55:52 -0400 (EDT) Jude DaShiell wrote: One of them is that spammers forge your address so much you get your account blacklisted and end up having to have it shut down. That happened to me and the jdash...@shellworld.net account.

Re: dangers of email forgery

2015-03-30 Thread David F. Skoll
On Mon, 30 Mar 2015 21:34:02 +0200 Reindl Harald h.rei...@thelounge.net wrote: one reason are the genius MS Exchange setips with a spamfilter in front, set the spamfilter IP to completly trusted and by incompetence in that moment also disable the address verification from the spamfilter

Re: dangers of email forgery

2015-03-30 Thread David F. Skoll
On Mon, 30 Mar 2015 20:07:56 +0100 RW rwmailli...@googlemail.com wrote: AFAIK there is no blacklist that lists individual sender email addresses. There's this one: https://code.google.com/p/anti-phishing-email-reply/ but its contributors are usually quite competent and won't list a

Re: dangers of email forgery

2015-03-30 Thread Reindl Harald
Am 30.03.2015 um 21:42 schrieb David F. Skoll: On Mon, 30 Mar 2015 21:34:02 +0200 Reindl Harald h.rei...@thelounge.net wrote: one reason are the genius MS Exchange setips with a spamfilter in front, set the spamfilter IP to completly trusted and by incompetence in that moment also disable

Re: dangers of email forgery

2015-03-30 Thread Martin Gregorie
On Mon, 2015-03-30 at 20:07 +0100, RW wrote: On Mon, 30 Mar 2015 13:55:52 -0400 (EDT) Jude DaShiell wrote: One of them is that spammers forge your address so much you get your account blacklisted and end up having to have it shut down. That happened to me and the

Re: dangers of email forgery

2015-03-30 Thread Reindl Harald
Am 30.03.2015 um 21:52 schrieb David F. Skoll: On Mon, 30 Mar 2015 21:47:10 +0200 Reindl Harald h.rei...@thelounge.net wrote: but i doubt that exchange don't know it's valid rcpt's and always backscatters with no way to disable that behavior - even in case of microsoft i doubt Google

Re: dangers of email forgery

2015-03-30 Thread David F. Skoll
On Mon, 30 Mar 2015 23:41:21 +0200 Reindl Harald h.rei...@thelounge.net wrote: well, than you can't use recent MS Exchange as a MX and have to place a MTA in front which get it's user list via database, LDAP or whatever and is able to reject invalid RCPTs Indeed. Office 365 does not grant

Re: Uptick in spam

2015-03-30 Thread Amir Caspi
On Mar 30, 2015, at 9:49 AM, Kris Deugau kdeu...@vianet.ca wrote: Seconded; this is exactly what we've been finding. Invaluement is a great complement to Spamhaus for a fraction of the cost. Definitely something to add to my nice to have list for the future. Sadly, as I mentioned earlier,

Re: Irregular Test Reports in SA?

2015-03-30 Thread John Hardin
On Mon, 30 Mar 2015, grhoderick wrote: After months of back and forth with the web host, their recommendation has been to add rules and do more intensive SA learning. But the way I understand it, no amount of tweaking symbolic test scores or adding rules can make up for not running the tests to