Re: The most efficient SPAM implementation ever

2020-10-11 Thread John Hardin
On Sun, 11 Oct 2020, Ramon F Herrera wrote: There you go, Bill: http://www.forcewise.com/~ramon/sysadmin/SolidWorks-SPAM http://www.forcewise.com/~ramon/sysadmin/SolidWorks-SPAM.mbox (both files are hardlinked) Those don't particularly look like revenge spamming; they look more like

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Bill Cole
On 11 Oct 2020, at 10:32, Ramon F Herrera wrote: Good point. spamd runs as root and sa-learn runs as 'ramon'. That scheme has worked perfectly well for years, except for that particular spam. That CAN work as long as you have spamd set up correctly for per-user Bayes. If it has worked

Re: The most efficient SPAM implementation ever

2020-10-11 Thread RW
On Sun, 11 Oct 2020 16:52:09 +0200 Antony Stone wrote: > 2. If it's stored in the wrong place, is there any way of > transferring or merging it back in to where it should be instead? If you dump both databases using 'sa-learn --backup' it's straightforward to conflate the two ascii files into

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Benny Pedersen
Ramon F Herrera skrev den 2020-10-11 17:20: I am the one who is a client of sendgrid. Before subscribing to their service (with low volume it is free) many of my messages were rejected. They provide legitimacy. Highly recommended: https://sendgrid.com/ and following this threads here your

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Benny Pedersen
Antony Stone skrev den 2020-10-11 16:52: Are you running sa-learn as the same user that spamd runs as ? Running sa-learn as root won't help the scores. unless root trains global Bayes username I've been aware of this advice / requirement almost since I started using SA. most users do it

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Andy Smith
Hello, On Sun, Oct 11, 2020 at 10:20:32AM -0500, Ramon F Herrera wrote: > On 10/11/2020 10:07 AM, Marc Roos wrote: > >Now you can decide to reject email coming from (the whole of) sendgrid. > > I am the one who is a client of sendgrid. Are you aware that you've posted this to a list where it is

RE: The most efficient SPAM implementation ever

2020-10-11 Thread Marc Roos
> I am the one who is a client of sendgrid. Before subscribing to their service (with low volume it is free) > many of my messages were rejected. They provide legitimacy. So the problem here is actually that a spammer whines about being spammed? :D But this does confirm my idea that one

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Ramon F Herrera
On 10/11/2020 10:07 AM, Marc Roos wrote: o16789123x54.outbound-mail.sendgrid.net. The specific range of sendgrid looks like this[1]. So now you know they use sendgrid and probably have access to a 'limited' dynamic ip range. Now you can decide to reject email coming from (the whole of)

RE: The most efficient SPAM implementation ever

2020-10-11 Thread Marc Roos
> > >I guess you are confused by my message and I am confused by yours. Allow me to clarify. Oops, did not notice jpg attachment. Better to post just text. >I have 3 lines of defense and the 2 main ones have failed. The SPAM messages are > undetected. You tell me that the best way is to

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Antony Stone
On Sunday 11 October 2020 at 16:28:12, Rick Macdougall wrote: > Hi, > > Are you running sa-learn as the same user that spamd runs as ? > > Running sa-learn as root won't help the scores. I've been aware of this advice / requirement almost since I started using SA. However, I've never been

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Ramon F Herrera
Good point. spamd runs as root and sa-learn runs as 'ramon'. That scheme has worked perfectly well for years, except for that particular spam. Thanks! -Ramon On 10/11/2020 9:28 AM, Rick Macdougall wrote: Hi, Are you running sa-learn as the same user that spamd runs as ? Running sa-learn

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Rick Macdougall
Hi, Are you running sa-learn as the same user that spamd runs as ? Running sa-learn as root won't help the scores. Regards, Rick On 2020-10-11 10:03 a.m., Ramon F Herrera wrote: *Line of Defense No. 2:* Spamassassin. It have submitted over a thousand messages as follows: % sa-learn

Re: The most efficient SPAM implementation ever

2020-10-11 Thread Axb
These forum messages probably have a common URL in them. Use something like: blacklist_uri_host solidworks.com to score the common URL. h2h On 10/10/20 4:52 PM, Ramon F Herrera wrote: Hello all: I have been a very satisfied user of spamassassin for a long time. Now I am facing a challenge,