Maxium URL acceptable length

2018-01-23 Thread Pedro David Marco
Hi, What is, in your opinion, the maximum URL acceptable length? I am not speaking about RFCs or defacto browsers limits, etc i am just asking you for personal opinions, please... Many browsers do not bookmark over 300 octets (aprox), and do not show in address-bar over 2500 octets (aprox). 

Re: Maxium URL acceptable length

2018-01-23 Thread Antony Stone
On Tuesday 23 January 2018 at 09:11:06, Pedro David Marco wrote: > Hi, > What is, in your opinion, the maximum URL acceptable length? Acceptable for what? Acceptable for a human to be able to remember? Acceptable for pasting into an email? Acceptable for expecting someone to type? > I am not

Using Cloud AutoML as an AI for an Anti-spam filter ?

2018-01-23 Thread Zulma Pape
Hi, I have just read about the Cloud AutoML and how Google made it possible for users to train their own custom machine learning algorithms from scratch. So the first thing that I got in my mind is, can we use this service to build our own Spam Filter based on the users experience. In other word

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

2018-01-23 Thread Benny Pedersen
Zulma Pape skrev den 2018-01-23 11:55: I have just read about the Cloud AutoML and how Google made it possible for users to train their own custom machine learning algorithms from scratch. +1 So the first thing that I got in my mind is, can we use this service to build our own Spam Filter ba

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

2018-01-23 Thread Kevin A. McGrail
On 1/23/2018 5:55 AM, Zulma Pape wrote: I have just read about the Cloud AutoML and how Google made it possible for users to train their own custom machine learning algorithms from scratch. So the first thing that I got in my mind is, can we use this service to build our own Spam Filter bas

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

2018-01-23 Thread Martin Gregorie
On Tue, 2018-01-23 at 10:55 +, Zulma Pape wrote: > Hi, > > I have just read about the Cloud AutoML and how Google made it > possible for users to train their own custom machine learning > algorithms from scratch. > That's very unlikely. What Google have released is a tool for training their i

Re: From name containing a spoofed email address

2018-01-23 Thread David Jones
On 01/22/2018 06:40 PM, Alex wrote: Hi, This part goes into the general HeaderEval.pm: $self->register_eval_rule("from_domains_mismatch"); [...] I'd like to try this, but this is not in the current 3.4.2 svn. I am running this by manually patching the HeaderEval.pm and so far it's findin

Receiving a lot of junk from Office 356

2018-01-23 Thread David Jones
First, if anyone from Microsoft is on this list, please setup proper outbound spam filtering, rate limiting, and compromised account detection with locking to prevent junk like this. I have seen a recent increase in the number of outbound junk and phishing emails that I keep reporting to SpamC

Re: Receiving a lot of junk from Office 356

2018-01-23 Thread Kris Deugau
David Jones wrote: First, if anyone from Microsoft is on this list, please setup proper outbound spam filtering, rate limiting, and compromised account detection with locking to prevent junk like this. I have seen a recent increase in the number of outbound junk and phishing emails that I kee

Re: Receiving a lot of junk from Office 356

2018-01-23 Thread Pedro David Marco
>I've had somewhat better success with hand-maintained rules focusing on >their "unsubscribe" phrases, since those have tended to be more >consistent, and the same phrases are found in other types of spam. > >-kgd this is good idea... unsubscribe instructions  without X-List-Unsubscribe h

Re: Maxium URL acceptable length

2018-01-23 Thread Pedro David Marco
>> Hi,>> What is, in your opinion, the maximum URL acceptable >> length?>>Acceptable for what?>>Acceptable for a human to be able to >> remember?>>Acceptable for pasting into an email?>>Acceptable for expecting >> someone to type?>>> I am not speaking about RFCs or defacto browsers limits, >>

Re: Receiving a lot of junk from Office 356

2018-01-23 Thread Vincent Fox
O365 has many very large tenant ponds now. Rules inside a tenant may be very lax about trusting other users inside the tenant. So one compromised account, easily leads to tens/hundreds of others. So their 2nd round of phish, nets Black Hats enough compromised accounts to blast out a camp

Re: From name containing a spoofed email address

2018-01-23 Thread shanew
Just to add to the confusion, uh, I mean options. Here's what I've got so far. I'm using it in production currently, but it's still very young code, so use it at your own risk. https://github.com/enkidushane/sa-frommismatch/ I purposely avoided using uri_to_domain because it's in flux right no

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

2018-01-23 Thread Dave Warren
On Tue, Jan 23, 2018, at 02:55, Zulma Pape wrote: > In other words, can we integrate the Cloud AutoML into our server's > spam filter and make it behave the same way Gmail behave ? In short, not without a *lot* of work. Gmail implements a lot more complexity, and they have a lot more data than you

Re: Receiving a lot of junk from Office 356

2018-01-23 Thread Alex
Hi, On Tue, Jan 23, 2018 at 10:17 AM, David Jones wrote: > First, if anyone from Microsoft is on this list, please setup proper > outbound spam filtering, rate limiting, and compromised account detection > with locking to prevent junk like this. > > I have seen a recent increase in the number of

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

2018-01-23 Thread John Hardin
On Tue, 23 Jan 2018, Dave Warren wrote: On Tue, Jan 23, 2018, at 02:55, Zulma Pape wrote: In other words, can we integrate the Cloud AutoML into our server's spam filter and make it behave the same way Gmail behave ? In short, not without a *lot* of work. Gmail implements a lot more complexit

Re: Receiving a lot of junk from Office 356

2018-01-23 Thread David Jones
On 01/23/2018 12:36 PM, Alex wrote: Hi, On Tue, Jan 23, 2018 at 10:17 AM, David Jones wrote: First, if anyone from Microsoft is on this list, please setup proper outbound spam filtering, rate limiting, and compromised account detection with locking to prevent junk like this. I have seen a rec

Sometimes (rarely) spamass-milter does not add the x-spam-* headers

2018-01-23 Thread Michael Grant
>From time to time (rarely) I notice that spamass-milter does not for some reason add the x-spam-* headers to a message, but I clearly see the "Milter add: header: X-Spam-Status:" in the mail log. For example, this is in the mail.log but nothing in the message received: Jan 22 13:47:56 strange sm

Pretty good spoof of AmEx

2018-01-23 Thread David Jones
Here is a good example of a spoof that might get user clicks. It didn't have good SPF or DKIM but it could have pretty easily making it look pretty clean in a default SA installation. https://pastebin.com/GTG8K56a Need to get this IP off of the HostKarma and dnswl.org whitelists if anyone fr

Re: Maxium URL acceptable length

2018-01-23 Thread Bill Cole
On 23 Jan 2018, at 11:55 (-0500), Pedro David Marco wrote: Shall SA accept URLs 5MB big for example? Generally speaking, SA should not be seeing whole messages that big, much less single URLs. Beyond the slowness and the resource demands of scanning large messages, the discernment power of S

Re: Pretty good spoof of AmEx

2018-01-23 Thread John Hardin
On Tue, 23 Jan 2018, David Jones wrote: Here is a good example of a spoof that might get user clicks. It didn't have good SPF or DKIM but it could have pretty easily making it look pretty clean in a default SA installation. https://pastebin.com/GTG8K56a Possible spam sign: multiple instanc

Re: Pretty good spoof of AmEx

2018-01-23 Thread Alex
Hi, On Tue, Jan 23, 2018 at 4:52 PM, David Jones wrote: > Here is a good example of a spoof that might get user clicks. It didn't > have good SPF or DKIM but it could have pretty easily making it look pretty > clean in a default SA installation. > > https://pastebin.com/GTG8K56a > > Need to get

Re: Pretty good spoof of AmEx

2018-01-23 Thread David Jones
On 01/23/2018 07:11 PM, Alex wrote: Hi, On Tue, Jan 23, 2018 at 4:52 PM, David Jones wrote: Here is a good example of a spoof that might get user clicks. It didn't have good SPF or DKIM but it could have pretty easily making it look pretty clean in a default SA installation. https://pastebin

Re: Pretty good spoof of AmEx

2018-01-23 Thread Tobi
Not 100% sure about 168.100.1.4 ip but the 168.100.1.3 ip is used by the official postfix mailinglist. Pretty sure they should not be removed from dnswl :-) - Originale Nachricht - Von: David Jones Gesendet: 24.01.18 - 03:26 An: users@spamassassin.apache.org Betreff: Re: Pretty good sp