Re: dangers of email forgery

2015-03-31 Thread Jude DaShiell
A little more background on all of this is that both verizon and microsoft had earlier blacklisted shellworld.net on a domain basis as a result of the high volume of spam being forged by several addresses on that domain mine wasn't the only address that was targeted on shellworld.net and I

Re: Irregular Test Reports in SA?

2015-03-31 Thread Kevin A. McGrail
On 3/30/2015 10:12 AM, grhoderick wrote: First, apologies in advance, I know this list is for seasoned users. I'm a consumer—not an administrator by any means—but posting here in hopes that the SA focus of the list will provide a clear answer. It's not just for seasoned users but not sure we can

TO_IN_SUBJ for username?

2015-03-31 Thread Amir Caspi
Hi, I'm guessing that TO_IN_SUBJ only pops when the Subject: contains the full email address in To:, not just the user part... is that right? I've been getting a bunch of spam (some of which ends up as FNs) with just the username portion of To: in the Subject line. This is almost

Re: dangers of email forgery

2015-03-31 Thread Jude DaShiell
Hi, I wasn't and am not the admin of shellworld.net and don't know if the domain got set up with an spf record or not. I know one thing for sure, before I try setting up my own domain, I'll be back here and ask a few questions. For screen reader accessibility I've heard good things about

Re: RBL/SPF if header exists

2015-03-31 Thread Joe Quinn
On 3/31/2015 12:12 PM, Mike Cardwell wrote: * on the Tue, Mar 31, 2015 at 11:59:39AM -0400, Joe Quinn wrote: Is it possible to enable or disable RBL and/or SPF checks according to the existence or lack of a header? Without going into too many details, I need a way of transmitting to

Re: RBL/SPF if header exists

2015-03-31 Thread Joe Quinn
On 3/31/2015 12:23 PM, Mike Cardwell wrote: * on the Tue, Mar 31, 2015 at 12:15:31PM -0400, Joe Quinn wrote: Here's an example from when Yahoo's internal Received headers were hitting RCVD_ILLEGAL_IP, taken from here: http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf header

Re: RBL/SPF if header exists

2015-03-31 Thread Joe Quinn
On 3/31/2015 11:45 AM, Mike Cardwell wrote: Is it possible to enable or disable RBL and/or SPF checks according to the existence or lack of a header? Without going into too many details, I need a way of transmitting to SpamAssassin at scan-time that it should not run SPF or RBL checks on a

Re: RBL/SPF if header exists

2015-03-31 Thread Mike Cardwell
* on the Tue, Mar 31, 2015 at 12:15:31PM -0400, Joe Quinn wrote: You can fairly easily write a meta that reverses the score of each RBL and SPF rule if your condition fires. Any chance you could point me to an example of how to do this? Here's an example from when Yahoo's internal Received

Re: RBL/SPF if header exists

2015-03-31 Thread John Hardin
On Tue, 31 Mar 2015, Mike Cardwell wrote: Is it possible to enable or disable RBL and/or SPF checks according to the existence or lack of a header? Without going into too many details, I need a way of transmitting to SpamAssassin at scan-time that it should not run SPF or RBL checks on a

RBL/SPF if header exists

2015-03-31 Thread Mike Cardwell
Is it possible to enable or disable RBL and/or SPF checks according to the existence or lack of a header? Without going into too many details, I need a way of transmitting to SpamAssassin at scan-time that it should not run SPF or RBL checks on a particular message, which isn't based on a

Re: dangers of email forgery

2015-03-31 Thread Martin Gregorie
On Tue, 2015-03-31 at 10:28 -0400, Jude DaShiell wrote: Hi, I wasn't and am not the admin of shellworld.net and don't know if the domain got set up with an spf record or not. Yes, it has SPF set up. I used this to see it: http://www.kitterman.com/spf/validate.html The first test on the page

Re: RBL/SPF if header exists

2015-03-31 Thread Mike Cardwell
* on the Tue, Mar 31, 2015 at 11:59:39AM -0400, Joe Quinn wrote: Is it possible to enable or disable RBL and/or SPF checks according to the existence or lack of a header? Without going into too many details, I need a way of transmitting to SpamAssassin at scan-time that it should not run

Re: Irregular Test Reports in SA?

2015-03-31 Thread Kevin A. McGrail
On 3/31/2015 2:21 PM, grhoderick wrote: All — thanks so much for your time. Regarding your questions, I'll do my best to answer given my inexperience with SA. Ahh, so you are using lunarpages. I've been working with Lunarpages and they use cpanel. Overall, I think that type of installation is

Re: RBL/SPF if header exists

2015-03-31 Thread David Jones
From: Joe Quinn jqu...@pccc.com Sent: Tuesday, March 31, 2015 11:44 AM To: users@spamassassin.apache.org Subject: Re: RBL/SPF if header exists On 3/31/2015 12:23 PM, Mike Cardwell wrote: * on the Tue, Mar 31, 2015 at 12:15:31PM -0400, Joe Quinn wrote: Here's an example from when Yahoo's

Re: Irregular Test Reports in SA?

2015-03-31 Thread grhoderick
All — thanks so much for your time. Regarding your questions, I'll do my best to answer given my inexperience with SA. Kevin A. McGrail wrote We need more headers to see. What version of SpamAssassin does the headers show? What rules does it show it hits when it does hit? Here's raw