Lost mail during update

2018-11-20 Thread @lbutlr
While updating spamassassin, several emails were destructive lost because of the absence of spamc. To be fair, the date did get stuck unexpectedly asking for a confirmation, but still I’d like to avoid this happening again. Nov 20 10:20:34 mail postfix/pipe[73448]: 42zsss3jHVzcfQ1: to=, orig_to

Port Spamass-rules?

2018-11-20 Thread @lbutlr
When updating Spam Assassin today I noticed that the notes at the end of the port install still recommend installing mail/spamass-rules. This should not be done, right? -- Get in there you big furry oaf! I don't care what you smell!

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread John Hardin
On Tue, 20 Nov 2018, Rupert Gallagher wrote: The email address is an address, part of your personally identifiable data. I'm not disputing that. I write software that deals with PII in my day job. If an identifiable entity in the US sends mass mail to European addresses, then they must hav

RE: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Benny Pedersen
On 21. november 2018 01.32.37 Kevin Miller My particular favorite fix is, if the mail list has a web preferences page, to go to there and edit the preferences then set the email address to postmaster@localhost. Now it's their problem. If thay test fqdn it Will be your problem :)

Re: whitelisting DCC messages

2018-11-20 Thread Alex
Hi, > $ /var/lib/dcc/bin/dccproc -QCw whiteclnt < dcc-empty > X-DCC--Metrics: mail01.example.com 1102; Body=0 Fuz1=0 Fuz2=many > reported: 0 checksum server > env_From: d41d8cd9 8f00b204 e9800998 ecf8427e > From: 7c09

whitelisting DCC messages

2018-11-20 Thread Alex
Hi, This is perhaps off-topic, but does anyone have any tips on how to whitelist a message that hits DCC? I believe it's hitting DCC because it has an empty body. I've created digests for pyzor and razor, but DCC is much more involved. I've tried generate a checksum, but I don't know if this is r

RE: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Kevin Miller
No worries. Someone with a similar issue will search for a solution someday, and have one at hand. :-) My particular favorite fix is, if the mail list has a web preferences page, to go to there and edit the preferences then set the email address to postmaster@localhost. Now it's their proble

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Anne P. Mitchell, Esq.
> The email address is an address, part of your personally identifiable data. > If an identifiable entity in the US sends mass mail to European addresses, > then they must have a representative in Europe and comply with the GDPR. I somehow missed that John is in the U.K., and actually re-rea

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Rupert Gallagher
The email address is an address, part of your personally identifiable data. If an identifiable entity in the US sends mass mail to European addresses, then they must have a representative in Europe and comply with the GDPR. On Tue, Nov 20, 2018 at 17:03, John Hardin wrote: > On Tue, 20 Nov 201

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Anne P. Mitchell, Esq.
> > Gents, Ahem. ;-) > > I somehow became subscribed to a list, political in nature, in whose mail I > have no interest. This is a legitimate AFAIK, US organization. > > Thus far, several uses of their unsubscribe link had not provided relief. > Direct email to the founder and ope

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Rupert Gallagher
Spam is income for those who sell it, a cost for those who buy it, and a liability for those who receive it. Thousands of junk and weaponized messages try their luck while wasting our resources. It is not by accident that we have anti-spam laws. Our unpaid job is to reject spam efficiently. Some

Re: multiplying in rules

2018-11-20 Thread RW
On Tue, 20 Nov 2018 13:14:54 -0800 (PST) John Hardin wrote: > On Tue, 20 Nov 2018, RW wrote: > > > On Tue, 20 Nov 2018 13:36:52 -0500 > > micah anderson wrote: > >> > >> How can I do it without the fractions? > > > > meta LOCAL_EXCEEDED_PHISH __MAILBOX + __LOCAL_EXCEEDED + > > __LOCAL_STORA

Re: multiplying in rules

2018-11-20 Thread John Hardin
On Tue, 20 Nov 2018, RW wrote: On Tue, 20 Nov 2018 13:36:52 -0500 micah anderson wrote: How can I do it without the fractions? meta LOCAL_EXCEEDED_PHISH __MAILBOX + __LOCAL_EXCEEDED + __LOCAL_STORAGE + __LOCAL_LIMIT >= 3 D'oh! That's actually the clearest solution (though I would do ">

Re: multiplying in rules

2018-11-20 Thread RW
On Tue, 20 Nov 2018 13:36:52 -0500 micah anderson wrote: > > But > > as I said it's the decimal fractions that cause it to fail and the > > above rule doesn't need to contain decimal fractions. > > How can I do it without the fractions? meta LOCAL_EXCEEDED_PHISH 4*__MAILBOX + 4*__LOCAL_EXCE

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Kevin A. McGrail
On 11/20/2018 2:43 PM, Joe Acquisto-j4 wrote: > Seems I may have maligned this un named organization. Other than maligning their cosmic karma, not really sure asking about how to gritch about them but not actually doing anything does any real harm :-) -- Kevin A. McGrail VP Fundraising, Apache S

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Joe Acquisto-j4
>>> On 11/19/2018 at 4:35 PM, in message , "Kevin A. McGrail" wrote: > On 11/18/2018 10:19 PM, Joe Acquisto-j4 wrote: >> So, is there some "authority" to which I can report these a**holes? that > might have an effect? > I would say some blacklists might be interested. I certainly list > emails b

Re: 9D character used in words to avoid detection.

2018-11-20 Thread Kevin A. McGrail
Pedro, I just checked a spample I have and it hits on the rule. Note, I do not use normalize charset but just expanded the rule to allow for that thanks to RW's post. Regards, KAM -- Kevin A. McGrail VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www

Re: multiplying in rules

2018-11-20 Thread micah anderson
"Bill Cole" writes: > On 20 Nov 2018, at 13:53, John Hardin wrote: > >> On Tue, 20 Nov 2018, micah anderson wrote: > [...] What it does do is prevent compiled rules from being installed. But as I said it's the decimal fractions that cause it to fail and the above rule doesn't

Re: multiplying in rules

2018-11-20 Thread Bill Cole
On 20 Nov 2018, at 13:53, John Hardin wrote: On Tue, 20 Nov 2018, micah anderson wrote: [...] What it does do is prevent compiled rules from being installed. But as I said it's the decimal fractions that cause it to fail and the above rule doesn't need to contain decimal fractions. How can

Re: multiplying in rules

2018-11-20 Thread John Hardin
On Tue, 20 Nov 2018, micah anderson wrote: RW writes: On Tue, 20 Nov 2018 12:53:18 -0500 micah anderson wrote: RW writes: On Tue, 20 Nov 2018 12:38:24 -0500 micah anderson wrote: I was doing multiplication in rules to add scores, like this: meta LOCAL_EXCEEDED_PHISH (((0.4 * __MAILBOX

Re: : 9D character used in words to avoid detection

2018-11-20 Thread John Hardin
On Tue, 20 Nov 2018, RW wrote: On Mon, 19 Nov 2018 13:31:47 -0800 (PST) John Hardin wrote: On Mon, 19 Nov 2018, Joseph Brennan wrote: Example: Obvi=9Do=9Dusly yo=9Du=9D ca=9Dn can cha=9Dnge=9D i=9Dt In windows-1256, the presence of =9D between characters under decimal-128 is suspicious, reg

Re: multiplying in rules

2018-11-20 Thread micah anderson
RW writes: > On Tue, 20 Nov 2018 12:53:18 -0500 > micah anderson wrote: > >> RW writes: >> >> > On Tue, 20 Nov 2018 12:38:24 -0500 >> > micah anderson wrote: >> > >> >> I was doing multiplication in rules to add scores, like this: >> >> >> >> meta LOCAL_EXCEEDED_PHISH (((0.4 * __MAILBOX) + (

Re: multiplying in rules

2018-11-20 Thread RW
On Tue, 20 Nov 2018 12:53:18 -0500 micah anderson wrote: > RW writes: > > > On Tue, 20 Nov 2018 12:38:24 -0500 > > micah anderson wrote: > > > >> I was doing multiplication in rules to add scores, like this: > >> > >> meta LOCAL_EXCEEDED_PHISH (((0.4 * __MAILBOX) + (0.4 * > >> __LOCAL_EXCEEDE

Re: multiplying in rules

2018-11-20 Thread Henrik K
On Tue, Nov 20, 2018 at 12:53:18PM -0500, micah anderson wrote: > RW writes: > > > On Tue, 20 Nov 2018 12:38:24 -0500 > > micah anderson wrote: > > > >> I was doing multiplication in rules to add scores, like this: > >> > >> meta LOCAL_EXCEEDED_PHISH (((0.4 * __MAILBOX) + (0.4 * > >> __LOCAL_E

Re: multiplying in rules

2018-11-20 Thread micah anderson
RW writes: > On Tue, 20 Nov 2018 12:38:24 -0500 > micah anderson wrote: > >> I was doing multiplication in rules to add scores, like this: >> >> meta LOCAL_EXCEEDED_PHISH (((0.4 * __MAILBOX) + (0.4 * >> __LOCAL_EXCEEDED) + (0.4 * __LOCAL_STORAGE) + (0.4 * __LOCAL_LIMIT)) >> > 1) >> >> but now w

Re: multiplying in rules

2018-11-20 Thread RW
On Tue, 20 Nov 2018 12:38:24 -0500 micah anderson wrote: > I was doing multiplication in rules to add scores, like this: > > meta LOCAL_EXCEEDED_PHISH (((0.4 * __MAILBOX) + (0.4 * > __LOCAL_EXCEEDED) + (0.4 * __LOCAL_STORAGE) + (0.4 * __LOCAL_LIMIT)) > > 1) > > but now when I run spamassassin --

multiplying in rules

2018-11-20 Thread micah anderson
I was doing multiplication in rules to add scores, like this: meta LOCAL_EXCEEDED_PHISH (((0.4 * __MAILBOX) + (0.4 * __LOCAL_EXCEEDED) + (0.4 * __LOCAL_STORAGE) + (0.4 * __LOCAL_LIMIT)) > 1) but now when I run spamassassin --lint, I'm told things like this: Nov 20 09:34:42.096 [11146] warn: c

Re: what is FromNameSpoof supposed to catch?

2018-11-20 Thread RW
On Tue, 20 Nov 2018 16:36:44 +0100 Matus UHLAR - fantomas wrote: > wasn't FromNameSpoof supposed to catch this kind of mails? > > From: "RB Techgum " > > when testing this with rules proposed in FromNameSpoof docs, none hit. And it didn't work with: From: "" but it did work with: From:

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread John Hardin
On Tue, 20 Nov 2018, Rupert Gallagher wrote: Yes, if you are European, and might get some money as compensation. From a US political advocacy group which has no commercial presence in EU? How does GDPR apply in that situation? On Mon, Nov 19, 2018 at 04:19, Joe Acquisto-j4 wrote: Gents,

Re: : 9D character used in words to avoid detection

2018-11-20 Thread RW
On Mon, 19 Nov 2018 13:31:47 -0800 (PST) John Hardin wrote: > On Mon, 19 Nov 2018, Joseph Brennan wrote: > > > Example: Obvi=9Do=9Dusly yo=9Du=9D ca=9Dn can cha=9Dnge=9D i=9Dt > > > > In windows-1256, the presence of =9D between characters under > > decimal-128 is suspicious, regardless of Bitcoi

what is FromNameSpoof supposed to catch?

2018-11-20 Thread Matus UHLAR - fantomas
wasn't FromNameSpoof supposed to catch this kind of mails? From: "RB Techgum " when testing this with rules proposed in FromNameSpoof docs, none hit. because of https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7624 I have applied following patch https://svn.apache.org/viewvc/spamassassin/bra

FromNameSpoof usage examples and experience

2018-11-20 Thread Matus UHLAR - fantomas
Hello, did anyone set up rules to use the FromNameSpoof plugin? Do you have any experiences about it? Thanks. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT aku

Re: : 9D character used in words to avoid detection

2018-11-20 Thread RW
On Mon, 19 Nov 2018 15:38:58 -0500 Joseph Brennan wrote: > Example: Obvi=9Do=9Dusly yo=9Du=9D ca=9Dn can cha=9Dnge=9D i=9Dt > > In windows-1256, the presence of =9D between characters under > decimal-128 is suspicious, regardless of Bitcoin. It seems like a > simple rule but even rawbody does not

Re: semi-OT - reporting an organization that ignores unsubscribe requests

2018-11-20 Thread Martin Gregorie
On 18 Nov 2018, at 22:19, Joe Acquisto-j4 wrote: > > > Gents, > > > > I somehow became subscribed to a list, political in nature, in > > whose mail I have no interest. This is a legitimate AFAIK, US > > organization. > > I just auto-bin this stuff if their 'unsubscribe' link doesn't work. Emira