Re: In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread Sebastian Arcus
On 14/09/17 19:59, Loren Wilton wrote: Should be easy to block.  Just block the cron-job.org domain. As someone else mentioned that address is an obvious joe-job. And scoring it high doesn't help that much. It worked for the first few weeks, then they went to contact@ to presumably get

Re: In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread jdow
Hm, meant this to go to the list, too. The misdirection is part of why I am so quiet on the list, which is why I forget the misbehavior, which reinforces the problem when I reenter the list for a discussion. I gotta mess with my .procmailrc file to rewrite the headers for SA list emails, I

Re: In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread Benny Pedersen
Dianne Skoll skrev den 2017-09-14 20:38: https://cron-job.org/en/spam-statement/ They are victims of a joe-job. yes prove that is really is us if it goes, it goes

Re: In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread David Jones
On 09/14/2017 01:37 PM, Dianne Skoll wrote: On Thu, 14 Sep 2017 11:27:27 -0700 "Loren Wilton" wrote: Other than being obvious spam, they seem to be set up as though they were legitimate commercial mailing list stuff, often containing things like contact-id and the like

Re: In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread Loren Wilton
Should be easy to block. Just block the cron-job.org domain. As someone else mentioned that address is an obvious joe-job. And scoring it high doesn't help that much. It worked for the first few weeks, then they went to contact@ to presumably get around that. I was surprised to see in the

Re: In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread David B Funk
On Thu, 14 Sep 2017, Dianne Skoll wrote: On Thu, 14 Sep 2017 11:27:27 -0700 "Loren Wilton" wrote: Other than being obvious spam, they seem to be set up as though they were legitimate commercial mailing list stuff, often containing things like contact-id and the like in

Re: In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread Dianne Skoll
Hi, again, Aha... https://cron-job.org/en/spam-statement/ They are victims of a joe-job. Regards, Dianne.

Re: In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread Dianne Skoll
On Thu, 14 Sep 2017 11:27:27 -0700 "Loren Wilton" wrote: > Other than being obvious spam, they seem to be set up as though they > were legitimate commercial mailing list stuff, often containing > things like contact-id and the like in the links. > Is anyone else seeing

In anyone else getting 325KB spams from cont...@cron-job.org?

2017-09-14 Thread Loren Wilton
For about a month now I've been getting about 30 spams a day that are all in the range of 325KB in size. This is all in two bogus style tags. The message itself is usually just a few links, very offten to proffbuilder.com. The from address is always a random name, but the email address is very

Re: new campaign: bitly & appengine.google

2017-09-14 Thread Benny Pedersen
Robert Kudyba skrev den 2017-09-14 16:18: A few less now, so these are ok to ignore? Sep 14 10:15:48.607 [21681] dbg: config: warning: SCORE SET FOR NON-EXISTENT RULE DNS_FROM_RFC_BOGUSMX search for RFC and remove rules

Re: new campaign: bitly & appengine.google

2017-09-14 Thread Kevin A. McGrail
I'll check but nothing jummps out as an issue.  Ping me next Wednesday. On 9/14/2017 10:18 AM, Robert Kudyba wrote: A few less now, so these are ok to ignore? spamassassin -D --lint 2>&1 | grep -Ei '(failed|undefined dependency|score set for non-existent rule)' Sep 14 10:15:48.606 [21681]

Re: new campaign: bitly & appengine.google

2017-09-14 Thread Robert Kudyba
A few less now, so these are ok to ignore? spamassassin -D --lint 2>&1 | grep -Ei '(failed|undefined dependency|score set for non-existent rule)' Sep 14 10:15:48.606 [21681] dbg: config: warning: score set for non-existent rule DNS_FROM_RFC_DSN Sep 14 10:15:48.606 [21681] dbg: config: warning:

Re: new campaign: bitly & appengine.google

2017-09-14 Thread Kevin A. McGrail
grab https://www.pccc.com/downloads/SpamAssassin/contrib/nonKAMrules.cf as well. After that let me know but some rules are internal use only so if it's a warning, don't be too concerned. Regards, KAM On 9/14/2017 9:57 AM, Robert Kudyba wrote: > i have lost the url for kam.cf :(

Re: new campaign: bitly & appengine.google

2017-09-14 Thread Robert Kudyba
> > i have lost the url for kam.cf :( > >

Re: [poppler] Encrypted malicious PDFs fails

2017-09-14 Thread Martin Gregorie
On Wed, 2017-09-13 at 20:36 -0400, Alex wrote: > I understood that without the password the document would not be > visible, not just that it couldn't be changed. > Thats my understanding too. I've always been unable to see a password protected PDF until I supply the password: all you see when