Re: Possible spam sign

2020-12-08 Thread Luis E. Muñoz
On 8 Dec 2020, at 12:47, Grant Taylor wrote: I think that the strict RFC specification does allow for multiple senders, but I don't remember how it's done and it's so rare that I'd accept the false positive. Yes to both. -lem

Re: BIMI pilot at Google

2020-07-24 Thread Luis E. Muñoz
On 24 Jul 2020, at 12:22, John Hardin wrote: Does that certificate include some kind of checksum of the logo image itself? If not, what is to prevent a spammer from obtaining all the needed certificates, and then changing the logo image they are hosting to match the entity they are spoofing?

Re: BIMI pilot at Google

2020-07-23 Thread Luis E. Muñoz
On 23 Jul 2020, at 0:56, Laurent S. wrote: BIMI requires DMARC, which is much easier to implement if you are a phisher creating a brand new domain .xyz with all the right SPF, DKIM, DMARC and BIMI. Putting the paypal logo on that .xyz domain and there you go. Your regular legit company will ofte

Re: BIMI pilot at Google

2020-07-22 Thread Luis E. Muñoz
On 22 Jul 2020, at 23:14, Kevin A. McGrail wrote: However, I have questions of adoption rate, impersonation concerns, anticompetitive concerns, and privacy concerns. This just sounds like a commercial tracking pixel but the devil is in the details. The pilot will shake things out more I imag

Re: Screwed-up scoring

2020-07-19 Thread Luis E. Muñoz
On 19 Jul 2020, at 10:54, Kevin A. McGrail wrote: Great question. That's really a third party rule. I would like to see it change eventually but maybe that's another phase. Thoughts? My thoughts are to delay any further social/political motivated name changes until after the extents of th

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-14 Thread Luis E. Muñoz
On 14 Jul 2020, at 10:10, Kevin A. McGrail wrote: Kevin, If my words or position had any chance of modifying course, I would certainly do so again. But as you say further down, the "hullabaloo" of people trying to present other points of view, is pointless. Luis, the article I quoted was we

Re: spamhaus enabled by default

2020-07-14 Thread Luis E. Muñoz
On 14 Jul 2020, at 9:53, Kevin A. McGrail wrote: I agree with you about the idea of turning off everything and just delivering 100% commented configuration files.. I believe SA is a framework that must have walls & paint added to make it a house. Others want it ready to go as a pre-fab house

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-14 Thread Luis E. Muñoz
On 14 Jul 2020, at 9:24, Kevin A. McGrail wrote: Here's a well researched and documented article from a medical journal on the topic with expert citations: https://jmla.pitt.edu/ojs/jmla/article/view/490 The abstract says it very well: "This commentary addresses the widespread use of racist l

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-11 Thread Luis E. Muñoz
On 10 Jul 2020, at 23:51, Bill Cole wrote: "Terribly offended" is not what I've heard from anyone but the issue has been raised by Black colleagues a few times in multiple contexts, as Yet Another Minor Annoyance in a world stuffed full of such little things. Reminds me of left-handed people

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-10 Thread Luis E. Muñoz
On 10 Jul 2020, at 12:29, @lbutlr wrote: If people are so fragile that they have to hold on to terms that are extremely offensive to some of their peers, they will get more spam. Oh noes. I keep hearing about this mythical people that get terribly offended by the use of these words. I've bee

Re: IMPORTANT NOTICE FOR PEOPLE RUNNING TRUNK re: [Bug 7826] Improve language around whitelist/blacklist and master/slave

2020-07-10 Thread Luis E. Muñoz
I am having a hard time reconciling the statements below. On 10 Jul 2020, at 13:21, Bill Cole wrote: We have no way of knowing how many people have thought less of SA because of terminology or whether any of those people might have otherwise become involved enough in the project to be contribu

Re: Two types of new spam

2020-01-05 Thread Luis E. Muñoz
On 3 Jan 2020, at 8:02, Kris Deugau wrote: I have a local rule adding a couple of points for anything coming direct-to-MX from any Amazon compute node, period. ⋮ Reality has intruded and there are in fact static IP assignments in the .compute.amazonaws.com tree (as well as ISP customers of our

Re: Bug or feature? ;-)

2019-03-25 Thread Luis E. Muñoz
On 25 Mar 2019, at 13:02, David B Funk wrote: For example, I've seen increasing amounts of spam which contain cloud based URLs in the body of the message (worthless for URIBL filtering) which may also contain URLs in the headers that are specific to the spammer source (thus viable targets for

Re: Spam rule for HTTP/HTTPS request to sender's root domain

2019-02-28 Thread Luis E. Muñoz
On 28 Feb 2019, at 11:53, Mike Marynowski wrote: There are many ways to determine what the root domain is. One way is analyzing the DNS response from the query to realize it's actually a root domain, or you can just grab the ICANN TLD list and use that to make a determination. What I'm proba

Re: Help with own RBL

2018-07-25 Thread Luis E. Muñoz
On 23 Jul 2018, at 23:40, Pedro David Marco wrote: On Tuesday, July 24, 2018, 12:07:52 AM GMT+2, David B Funk wrote: What kind of 'calculations with that IP' ? Thanks Dave... calculations are complex and done with a an external script that reads some files parsing them... Depending o

Re: List From and Reply-To

2018-06-01 Thread Luis E. Muñoz
On 1 Jun 2018, at 5:12, @lbutlr wrote: On 30 May 2018, at 15:34, Luis E. Muñoz wrote: To further the point, one of the mailboxes I manage on this box has 95K+ messages. Apple Mail would choke to dead on this one. Not at all. I have folders in mail.app with more than twice that number of

Re: [Offtopic] List From and Reply-To

2018-05-30 Thread Luis E. Muñoz
On 30 May 2018, at 14:30, Bill Cole wrote: And if you can imagine this, both Thunderbird and MailMate choke on large mailboxes *even more* than Mail.app does. I haven't had MM "choke" on large mailboxes in recent years. I wish Benny would just declare a 2.0 release to make it clear that MM t

Re: [Offtopic] List From and Reply-To

2018-05-30 Thread Luis E. Muñoz
On 30 May 2018, at 13:54, Bill Cole wrote: On 30 May 2018, at 14:51 (-0400), Grant Taylor wrote: Since Qualcom transferred the Eudora IP to the Computer History Museum and open sourced the source code, I expect that we will be seeing movement there in. I think I've seen some references to p

Re: IADB whitelist - again

2018-03-05 Thread Luis E. Muñoz
On 3 Mar 2018, at 3:54, Noel Butler wrote: On 03/03/2018 11:40, John Hardin wrote: On Sat, 3 Mar 2018, Noel Butler wrote: On 03/03/2018 04:40, John Hardin wrote: On Fri, 2 Mar 2018, Sebastian Arcus wrote: -0.2 RCVD_IN_IADB_RDNS RBL: IADB: Sender has reverse DNS record [199.127.240.84 l

Re: IADB whitelist - again

2018-03-02 Thread Luis E. Muñoz
On 2 Mar 2018, at 0:48, Sebastian Arcus wrote: But why does SA have to expose a rule for each and every code IADB provides? So that users can implement their own policies if desired? So that different rules can have a more granular effect on the inbound email flow, without this being a simpl

Re: Can't Get Removed From List

2018-03-01 Thread Luis E. Muñoz
On 1 Mar 2018, at 11:54, Miles Fidelman wrote: [...] and sometimes turn on VERP to narrow things down to an individual. It's all made so much worse by morons who confuse the "spam" button with their "delete" key when using webmail from a big provider. Sigh...) Out of curiosity, why turn off V

Re: IADB whitelist - again

2018-03-01 Thread Luis E. Muñoz
On 1 Mar 2018, at 10:29, Sebastian Arcus wrote: I know I have brought up this issue on this list before, and sorry for the persistence, but having 7 different rules adding scores for the IADB whitelist still seems either ridiculous, or outright suspect: (Disclaimer, I have inner visibility in

Re: URI parser problems

2017-12-05 Thread Luis E. Muñoz
On 5 Dec 2017, at 14:59, John Hardin wrote: How often would we see a valid registered domain name like "x.info" for example? This is not as rare as you would think. Those names are more expensive, but not insanely so. https://uniregistry.link/premium-domain-names/ Best regards -lem

Re: Would anyone be interested in a SA enhancing service?

2017-09-22 Thread Luis E. Muñoz
On 22 Sep 2017, at 10:43, John Hardin wrote: He was only proposing the subject. Essentially it sounds like a subjectBL service. In the same message he said "The next level would be sending the message headers and eventually - the full message." Best regards -lem

Re: Would anyone be interested in a SA enhancing service?

2017-09-22 Thread Luis E. Muñoz
Mark, This certainly does not add confidence in the "techniques no one else is using": ``` ⋮ supp...@junkemailfilter.com host darwin.ctyme.com [184.105.182.171] SMTP error from remote mail server after end of data: 550-FAKE-REJECT - TLD-FROM [click] is blocked - X=darwin ⋮ ```