Response from ISIPP (was Re: ISIPP - Re: bb.barracudacentral.org)

2017-11-15 Thread Anne P. Mitchell Esq.
Hi Guys! This thread was only just brought to our attention, and the thread is now several levels deep and a bit old, so if you can help me out with letting me know what the outstanding issues are, I'd really appreciate it. As best as I can tell from reading through the thread online, there a

Re: The rise of highly targeted spam emails

2017-11-15 Thread Martin Gregorie
On Wed, 2017-11-15 at 14:44 +, Sebastian Arcus wrote: > Thank you - that is an interesting idea. Do you use a software to  > extract the emails from the Sent archives, or do you add them to the  > database on-the-fly, when the sent emails go out through your MTA? > If you have any links or exam

potential new SA feature: Direct DNS Querying Per DNSBL Zone

2017-11-15 Thread Rob McEwen
RE: potential new SA feature: Direct DNS Querying Per DNSBL Zone A couple of months ago, I commissioned the development of a potential new feature in SA. The code is mostly already written, but has at least one significant bug. Therefore, it is currently in the SA Bugzilla – Bug 7477 https:/

Re: The rise of highly targeted spam emails

2017-11-15 Thread Sebastian Arcus
On 15/11/17 09:56, Reindl Harald wrote: Am 15.11.2017 um 09:41 schrieb Sebastian Arcus: I can't really train the bayesian filter on these emails, as it would start to affect ham emails classification this is a unproven claim! we have here phishings in bayes which are classified with BAYES_9

Re: The rise of highly targeted spam emails

2017-11-15 Thread Sebastian Arcus
On 15/11/17 09:55, Martin Gregorie wrote: On Wed, 2017-11-15 at 08:41 +, Sebastian Arcus wrote: The emails often contain links to various popular cloud platforms - such as SharePoint, DropBox etc. Most of the emails come from clean domains, or from large webmail providers. I'd say there i

Re: SA-Update not updating DB

2017-11-15 Thread Kevin A. McGrail
On 11/15/2017 8:27 AM, David Jones wrote: We are getting closer to having complete rulesets working again. NOTE: The latest ruleset generated hours ago is still not quite complete but I think it's safe for testing.  I have applied this ruleset to my platforms. REV=1815188 wget http://sa-upd

Re: SA-Update not updating DB

2017-11-15 Thread David Jones
On 11/14/2017 04:37 PM, Rafael Leiva-Ochoa wrote: If you need testers, please let me know, I can help. We are getting closer to having complete rulesets working again. NOTE: The latest ruleset generated hours ago is still not quite complete but I think it's safe for testing. I have applied

Re: listed by xbl [Was: SPF check though external relay]

2017-11-15 Thread RW
On Tue, 14 Nov 2017 12:23:46 -0800 Ian Zimmerman wrote: > ~$ rblcheck 81.17.24.158 ... > 81.17.24.158 listed by xbl.spamhaus.org It's a shared VPN address, so I'm not surprised.

Re: The rise of highly targeted spam emails

2017-11-15 Thread Matthew Broadhead
Hi Sebastian, I have a firm of solicitors as clients and they get these same highly targeted emails.  They are much more sophisticated and have caused us some problems already. All I can do is keep reminding them to check that the email is authentic. Some Solicitors have started adding a war

Re: The rise of highly targeted spam emails

2017-11-15 Thread Martin Gregorie
On Wed, 2017-11-15 at 08:41 +, Sebastian Arcus wrote: > The emails often contain links to various popular cloud platforms - > such as SharePoint, DropBox etc. Most of the emails come from clean > domains, or from large webmail providers. > I'd say there is not a lot you can do if the legit so

The rise of highly targeted spam emails

2017-11-15 Thread Sebastian Arcus
I have noticed in the last half a year or so the rise in much more focused email campaigns. I have some solicitor and accountant clients who receive these scam emails which are a notch above the rest. The English is good and correctly spelled. The footers look professional and just like the one