Re: Really hard-to-filter spam

On Fri, Aug 04, 2023 at 08:38:24AM -0500, Thomas Cameron wrote: > It was a typo, sorry. I have a cron job that uses --spam against the spam > folder, and --ham against the ham folder. I just copied and pasted poorly. > This is the actual script for my account: > > [thomas.cameron@mail-east ~]$ cat

Re: Really hard-to-filter spam

On 8/4/23 02:15, Sean Greenslade wrote: On Wed, Aug 02, 2023 at 04:17:22PM -0500, Thomas Cameron via users wrote: On 8/2/23 15:52, David B Funk wrote: I have the users move spam to an imap folder, and then run (via the user's cron job): sa-learn --mbox --spam /home/[username]/mail/spam I

Re: Really hard-to-filter spam

On Wed, Aug 02, 2023 at 04:17:22PM -0500, Thomas Cameron via users wrote: > On 8/2/23 15:52, David B Funk wrote: > > > > I have the users move spam to an imap folder, and then run (via the user's > cron job): > > sa-learn --mbox --spam /home/[username]/mail/spam > > If something is flagged as sp

Re: Really hard-to-filter spam

On 8/2/23 15:52, David B Funk wrote: Regardless, if a message has never been seen before and has little correlation to earlier messages its Bayes should hit someplace in the 40% to 60% range. The fact that it hit 00% indicates a strong correlation to lots of ham (or something is screwy with

Re: Really hard-to-filter spam

On Wed, 2 Aug 2023, Thomas Cameron via users wrote: Thank you very much. The message that slipped through today was NOT one of the ones being discussed in this thread, it was a different format and totally different message. I only included it to demonstrate that my server was not being reject

Re: Really hard-to-filter spam

On 8/2/23 14:32, Dave Funk wrote: On Wed, 2 Aug 2023, Thomas Cameron via users wrote: Wow! What a charming response! You must be a LOT of fun at parties, and have lots of friends! Please don't feed the troll. There's a reason that Reindl is blocked from this list. I was not aware, and

Re: Really hard-to-filter spam

On Wed, 2 Aug 2023, Thomas Cameron via users wrote: Wow! What a charming response! You must be a LOT of fun at parties, and have lots of friends! Please don't feed the troll. There's a reason that Reindl is blocked from this list. No, I did not get that response. I don't have any of thos

Re: Really hard-to-filter spam

On 8/2/23 13:28, Reindl Harald wrote: then i bet you have the same "RCVD_IN_ZEN_BLOCKED_OPENDNS" as the OP which means you are not capable to operate a mailserver https://www.spamhaus.org/returnc/pub/ throwen against our spamfilter it would be blocked without any question - above 8.0 points t

Re: Really hard-to-filter spam

On 7/28/23 00:23, Bill Cole wrote: 1. There are milters/content-filters that decode Base64 message parts (amavisd-new, mimedefang, etc) for processing by SA. 2.  There are still sufficiently unique items: First-Name-Only, Mixed-Case word in the Subject (NLP modeling), and a Base-64 encoded HTML

Re: Really hard-to-filter spam

On 7/28/2023 1:49 AM, Ken D'Ambrosio wrote: On 7/27/2023 12:08 PM, Ken D'Ambrosio wrote: Hey, all. I've recently started getting spam that's really hard to deal with, and I'm open to suggestions as to how to approach it. Superficially, Sweet!  The assistance of those who actually felt like as

Re: Really hard-to-filter spam

On 7/27/2023 12:08 PM, Ken D'Ambrosio wrote: Hey, all. I've recently started getting spam that's really hard to deal with, and I'm open to suggestions as to how to approach it. Superficially, I'm not sure why the OP's rule didn't match the target message, but it is NOT because of the Base64 enc

Re: Really hard-to-filter spam

On 2023-07-28 at 00:26:51 UTC-0400 (Thu, 27 Jul 2023 23:26:51 -0500 (CDT)) David B Funk is rumored to have said: On Fri, 28 Jul 2023, Jared Hall wrote: On 7/27/2023 12:08 PM, Ken D'Ambrosio wrote: Hey, all. I've recently started getting spam that's really hard to deal with, and I'm open to

Re: Really hard-to-filter spam

On Fri, 28 Jul 2023, Jared Hall wrote: On 7/27/2023 12:08 PM, Ken D'Ambrosio wrote: Hey, all. I've recently started getting spam that's really hard to deal with, and I'm open to suggestions as to how to approach it. Superficially, [snip..] The damn body's been encoded!  And there's so little

RE: Really hard-to-filter spam

> > Hey, all. I've recently started getting spam that's really hard to deal > with, and I'm open to suggestions as to how to approach it. > Superficially, they all look much like this: > Post the complete message source including headers.

Re: how sendgrid is abusing the ukraine crisis (or they are still to dumb to filter for spam)

Bill Cole writes: > On 2022-03-04 at 09:18:08 UTC-0500 (Fri, 04 Mar 2022 09:18:08 -0500) > Greg Troxel > is rumored to have said: > >> Greg Troxel writes: >> >>> With stock scores, sendgrid gets >>> >>> 2.1 URIBL_GREY Contains an URL listed in the URIBL greylist >>>

Re: how sendgrid is abusing the ukraine crisis (or they are still to dumb to filter for spam)

On 2022-03-04 at 09:18:08 UTC-0500 (Fri, 04 Mar 2022 09:18:08 -0500) Greg Troxel is rumored to have said: > Greg Troxel writes: > >> With stock scores, sendgrid gets >> >> 2.1 URIBL_GREY Contains an URL listed in the URIBL greylist >> [URIs: sendgrid.net]

Re: how sendgrid is abusing the ukraine crisis (or they are still to dumb to filter for spam)

FWIW at least I've found them to be responsive to abuse reports, unlike Amazon SES. On 2022-03-04 08:01, Marc wrote: Is anyone blocking already connections from outbound-mail.sendgrid.net? Does that generate a lot of false positives? PS. just posting this so it is on web archives and people se

Re: how sendgrid is abusing the ukraine crisis (or they are still to dumb to filter for spam)

On Fri, 2022-03-04 at 13:01 +, Marc wrote: > Is anyone blocking already connections from outbound- > mail.sendgrid.net? Does that generate a lot of false positives? > PS. just posting this so it is on web archives and people searching > for sendgrid hopefully chose a better service. > Unfort

Re: how sendgrid is abusing the ukraine crisis (or they are still to dumb to filter for spam)

Greg Troxel writes: > With stock scores, sendgrid gets > > 2.1 URIBL_GREY Contains an URL listed in the URIBL greylist > [URIs: sendgrid.net] > 1.5 KAM_SENDGRID Sendgrid being exploited by scammers > > and I find 3.6 a bit much. But maybe 72%

Re: how sendgrid is abusing the ukraine crisis (or they are still to dumb to filter for spam)

CC: trimmed as my message is not an abuse report. You asked about outright blocking, but you didn't ask if people thought that was wise. I received a piece of ham today, and the received line added by my MTA is: Received: from o1678989x80.outbound-mail.sendgrid.net (o1678989x80.outbound-mail

Re: how sendgrid is abusing the ukraine crisis (or they are still to dumb to filter for spam)

On 2022-03-04 14:01, Marc wrote: Is anyone blocking already connections from outbound-mail.sendgrid.net? Does that generate a lot of false positives? PS. just posting this so it is on web archives and people searching for sendgrid hopefully chose a better service. first define better service

Spamassassin reading inbound filter results; WAS: Re: Optimising DNS-based checks

I *do* have Postfix adding a Received-SPF filter using python-policyd-spf (called as last check in smtpd_recipient_restrictions), so yes it would make sense for spamassassin to trust the check already made - I'll see if I can work out how to do that. This got me checking the f

Re: How do I filter emails that have only special characters in them.

Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Tue, Jul 2, 2019 at 8:17 AM Mark London wrote: Hi - I'm trying to filter emails that have only special characters in them. Like the text of the following email. Thanks. - Mark - =CA=9C=C9=AA=CA=80=E1=B4=87s s=

Re: How do I filter emails that have only special characters in them.

On 7/2/2019 11:13 AM, Grant Taylor wrote: > On 7/2/19 6:42 AM, Kevin A. McGrail wrote: >> I can't remember an encoding format like that > > That looks like quoted printable at first (undercaffeinated) glance. Yep, definitely QP, thanks.

Re: How do I filter emails that have only special characters in them.

On 7/2/19 6:42 AM, Kevin A. McGrail wrote: I can't remember an encoding format like that That looks like quoted printable at first (undercaffeinated) glance. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature

Re: How do I filter emails that have only special characters in them.

There's BODY_8BIT IIRC, which is 8 consecutive 8-bit characters. That'll catch sequences of UTF-8 characters outside the ASCII range since they all have the high bit set. On 7/2/19 5:16 AM, Mark London wrote: Hi - I'm trying to filter emails that have only special characters i

Re: How do I filter emails that have only special characters in them.

- 703.798.0171 > > >> On Tue, Jul 2, 2019 at 8:17 AM Mark London wrote: >> Hi - I'm trying to filter emails that have only special characters in >> them. Like the text of the following email. Thanks. - Mark >> >> - =CA=9C=C9=AA=CA=80=E1=B4=87s s=CA=9

Re: How do I filter emails that have only special characters in them.

assin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Tue, Jul 2, 2019 at 8:17 AM Mark London wrote: > Hi - I'm trying to filter emails that have only special characters in > them. Like the text of the following email. Thanks. - Mark > > - =CA=9C=C9=AA=CA=80=E

How do I filter emails that have only special characters in them.

Hi - I'm trying to filter emails that have only special characters in them. Like the text of the following email. Thanks. - Mark - =CA=9C=C9=AA=CA=80=E1=B4=87s s=CA=9C=E1=B4=87=E1=B4=8D=E1=B4=80=CA=9F=E1= =B4=87s =E1=B4=9B=E1=B4=8F s=E1=B4=9C=E1=B4=84=E1=B4=8B =E1=B4=9B=CA=9C=E1= =B4=

Re: Help needed - Regex filter with exclude

On 12/23/2018 6:52 AM, spamassassin_fo...@dwd.hu wrote: > Hi, > I want to filter all mails incoming to info@*ANY_DOMAIN*.hu except to > i...@asdf.hu > I have a lot of domains and spamming to info@ is legal in Hungary. :S > Thank you! If you are just looking for a regex, th

Re: Help needed - Regex filter with exclude

On Sun, 23 Dec 2018, spamassassin_fo...@dwd.hu wrote: I want to filter all mails incoming to info@*ANY_DOMAIN*.hu except to i...@asdf.hu I have a lot of domains and spamming to info@ is legal in Hungary. :S Thank you! Filtering like that is much better done in the MTA before the message

Re: Help needed - Regex filter with exclude

On 23.12.18 12:52, spamassassin_fo...@dwd.hu wrote: I want to filter all mails incoming to info@*ANY_DOMAIN*.hu except to i...@asdf.hu I believe simple directives "whitelist_to", "more_spam_to" and "all_spam_to" I have a lot of domains and spamming to info

Help needed - Regex filter with exclude

Hi, I want to filter all mails incoming to info@*ANY_DOMAIN*.hu except to i...@asdf.hu I have a lot of domains and spamming to info@ is legal in Hungary. :S Thank you!

Re: Bayes filter with phrases

On Mon, 26 Nov 2018 15:58:08 +0100 Alex Woick wrote: > I cannot believe nobody did some Bayes variant in the past that > identifies and feeds phrases of 2-4 words into the database instead > of only single words. If you want that you can use a suitably configured third-party fi

Bayes filter with phrases

nt of catchy phrases - guess some score for the meta rule and hope it is appropriate and will only push the total score just over 5, nothing more In the end, I'm doing nothing different than a Bayes filter, only with phrases of 2-4 words instead of single words, and rate all manually instea

Re: Using UTF-8 characters to avoid spam filter rules.

On Fri, 29 Jun 2018 10:20:45 -0400 Alex wrote: > On Thu, Jun 28, 2018 at 3:59 PM, Zinski, Steve > wrote: > > These sextortion scammers are clever. So, instead of filtering on > > the word “bitcoin”, I now filter on a bitcoin regex (see below) > > > > > > >

Re: Using UTF-8 characters to avoid spam filter rules.

On Fri, 29 Jun 2018, Alex wrote: On Thu, Jun 28, 2018 at 3:59 PM, Zinski, Steve wrote: These sextortion scammers are clever. So, instead of filtering on the word “bitcoin”, I now filter on a bitcoin regex (see below) and some other words such as “pixel”, “virus”, etc. which are always a part

Re: Using UTF-8 characters to avoid spam filter rules.

word “wallet” as: > > > > w%D0%B0ll%D0%B5t > > > > These sextortion scammers are clever. So, instead of filtering on the word > “bitcoin”, I now filter on a bitcoin regex (see below) and some other words > such as “pixel”, “virus”, etc. which are always a part of the sexto

Re: Using UTF-8 characters to avoid spam filter rules.

, instead of filtering on the word “bitcoin”, I now filter on a bitcoin regex (see below) and some other words such as “pixel”, “virus”, etc. which are always a part of the sextortion message. body __BITCOIN /\b[13][a-km-zA-HJ-NP-Z1-9]{25,34}\b/ Ok, I've added those to my sandb

Re: Using UTF-8 characters to avoid spam filter rules.

now filter on a bitcoin regex (see below) and some other words such as “pixel”, “virus”, etc. which are always a part of the sextortion message. body __BITCOIN /\b[13][a-km-zA-HJ-NP-Z1-9]{25,34}\b/ Steve From: Mark London Date: Thursday, June 28, 2018 at 2:26 PM To: "

Re: Using UTF-8 characters to avoid spam filter rules.

On 6/28/2018 1:46 PM, users-digest-h...@spamassassin.apache.org wrote: Subject: Re: Using UTF-8 characters to avoid spam filter rules. From: RW Date: 6/26/2018 12:12 PM To: users@spamassassin.apache.org On Tue, 26 Jun 2018 00:33:11 -0400 Mark London wrote: Hi - Some of the words in the

Re: Using UTF-8 characters to avoid spam filter rules.

On Tue, 26 Jun 2018 00:33:11 -0400 Mark London wrote: > Hi - Some of the words in the spam email below, are using UTF-8 > characters, to avoid spam detection. I.e. the phrase "bitcoin wallet > address", are not the simple ASCII characters that they appear to be. > > View the source of my email

Re: Using UTF-8 characters to avoid spam filter rules.

Mark London skrev den 2018-06-26 06:33: Hi - Some of the words in the spam email below, are using UTF-8 characters, to avoid spam detection. I.e. the phrase "bitcoin wallet address", are not the simple ASCII characters that they appear to be. sa-laern --spam spam-msg-file View the source of

Using UTF-8 characters to avoid spam filter rules.

Hi - Some of the words in the spam email below, are using UTF-8 characters, to avoid spam detection. I.e. the phrase "bitcoin wallet address", are not the simple ASCII characters that they appear to be. View the source of my email, to understand what I'm talking about. Is there any rule I can

Re: action_drop_with_warning called outside of filter context

Hi, > mimedefang.pl[10245]: w1K87JOB027594: action_drop_with_warning called > outside of filter context > then the attachment was not dropped. > here is my filter: Please read mimedefang-filter man page very carefully. Regards, Dianne.

action_drop_with_warning called outside of filter context

Hello, We are running mimedefang with Spamassassin and Clamav to secure our mailling server. but actually, i have a probleme with mimedefang-filter. the following error appear when a virus is detected: mimedefang.pl[10245]: w1K87JOB027594: Detected virus PUA.Win.Trojan.EmbeddedPDF-1

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

On Tue, 23 Jan 2018, Dave Warren wrote: On Tue, Jan 23, 2018, at 02:55, Zulma Pape wrote: In other words, can we integrate the Cloud AutoML into our server's spam filter and make it behave the same way Gmail behave ? In short, not without a *lot* of work. Gmail implements a lot

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

On Tue, Jan 23, 2018, at 02:55, Zulma Pape wrote: > In other words, can we integrate the Cloud AutoML into our server's > spam filter and make it behave the same way Gmail behave ? In short, not without a *lot* of work. Gmail implements a lot more complexity, and they have a lot mor

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

On Tue, 2018-01-23 at 10:55 +, Zulma Pape wrote: > Hi, > > I have just read about the Cloud AutoML and how Google made it > possible for users to train their own custom machine learning > algorithms from scratch. > That's very unlikely. What Google have released is a tool for training their i

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

On 1/23/2018 5:55 AM, Zulma Pape wrote: I have just read about the Cloud AutoML and how Google made it possible for users to train their own custom machine learning algorithms from scratch. So the first thing that I got in my mind is, can we use this service to build our own Spam Filter

Re: Using Cloud AutoML as an AI for an Anti-spam filter ?

Zulma Pape skrev den 2018-01-23 11:55: I have just read about the Cloud AutoML and how Google made it possible for users to train their own custom machine learning algorithms from scratch. +1 So the first thing that I got in my mind is, can we use this service to build our own Spam Filter

Using Cloud AutoML as an AI for an Anti-spam filter ?

Hi, I have just read about the Cloud AutoML and how Google made it possible for users to train their own custom machine learning algorithms from scratch. So the first thing that I got in my mind is, can we use this service to build our own Spam Filter based on the users experience. In other

Re: Flakey spam email. How to filter?

On Mon, 11 Dec 2017 21:55:08 +0100 (GMT+01:00) Tobi wrote: > @Dave > you're sure that trusted_networks must be changed in case of fetching > mails? I fetch mines from gmail too and sa always has the correct > first non trusted relay. Without changing *_networks. With fetching > you do not get an s

Re: FIlter

oncom.com] Sent: Friday, December 01, 2017 1:36 PM To: Kevin Miller Cc: users@spamassassin.apache.org Subject: RE: FIlter Do you know any additional lists that could be added in addition to: - built ones - http://wiki.junkemailfilter.com - razors I have the spam score set to above to be 100% spam as

Re: Flakey spam email. How to filter?

On 11 Dec 2017, at 10:44 (-0500), Mark London wrote: I'm getting a lot of flakey spam messages, that don't trigger any significant spamassassin rules, even though it obviously looks really bogus. Here's an example. Any suggestions? https://pastebin.com/bZUt0ThS These spams are being sent

Re: Flakey spam email. How to filter?

--- Von: David Jones Gesendet: 11.12.17 - 17:27 An: users@spamassassin.apache.org Betreff: Re: Flakey spam email. How to filter? On 12/11/2017 09:44 AM, Mark London wrote: I'm getting a lot of flakey spam messages,  that don't trigger any significant spamassassin rules, even though it

Re: Flakey spam email. How to filter?

lakey spam email. How to filter? > On 12/11/2017 09:44 AM, Mark London wrote: >> I'm getting a lot of flakey spam messages,  that don't trigger any >> significant spamassassin rules, even though it obviously looks really >> bogus. >> >> He

Re: FIlter

t. >>> 155 South Seward Street >>> Juneau, Alaska 99801 >>> Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: >>> 307357 >>> >>> >>> -Original Message- >>> From: Junk [mailto:j...@lexoncom.com]

RE: FIlter

2017 10:20 AM To: Kevin Miller Cc: users@spamassassin.apache.org Subject: RE: FIlter I wonder in addition to what recomened i could add to increase the score. I am browsing through the archives to learn more but if you think of something quick i could try. Switching to postfix is my next goal but this requires me to r

Re: FIlter

nt: Friday, December 01, 2017 1:36 PM To: Kevin Miller Cc: users@spamassassin.apache.org Subject: RE: FIlter Do you know any additional lists that could be added in addition to: - built ones - http://wiki.junkemailfilter.com - razors I have the spam score set to above to be 100% spam as i noticed wha

RE: FIlter

S Dept. > 155 South Seward Street > Juneau, Alaska 99801 > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: > 307357 > > > -Original Message- > From: Junk [mailto:j...@lexoncom.com] > Sent: Friday, December 01, 2017 1:36 PM > To: Kevin Mille

Re: Flakey spam email. How to filter?

Mark you are right: mix of upper and lower letters + huge div height (500px) + HTML email with no HTML tag + suspicious URLs + suspicious (to me) mailer (i cannot find much in google about moonray mailer)... i wish SA had a rule to test only the HTML tags... (rawbody - body)...   maybe this can

Re: Flakey spam email. How to filter?

On 12/11/2017 10:59 AM, Reindl Harald wrote: Am 11.12.2017 um 16:44 schrieb Mark London: I'm getting a lot of flakey spam messages, that don't trigger any significant spamassassin rules, even though it obviously looks really bogus. Here's an example. Any suggestions? https://pastebin.com/

Re: Flakey spam email. How to filter?

eing sent to my gmail account, and then forwarded to my work address  I tried stripping off all the forwarding headers, but it doesn't trigger any RBLs Thanks for any help. - Mark It's going to be very difficult to filter mail properly that has been forwarded from Gmail. Why

Flakey spam email. How to filter?

I'm getting a lot of flakey spam messages, that don't trigger any significant spamassassin rules, even though it obviously looks really bogus. Here's an example. Any suggestions? https://pastebin.com/bZUt0ThS These spams are being sent to my gmail account, and then forwarded to my work add

Re: FIlter

On 04.12.17 21:04, Junk wrote: what i am asking is how to you manage actual IPs of the hosts providing services. you apparently mean, addresses of blacklists (below). What if at some point one of them or more are out of service? D you monitor it so in case some stop providing the services yo

Re: FIlter

what i am asking is how to you manage actual IPs of the hosts providing services. What if at some point one of them or more are out of service? D you monitor it so in case some stop providing the services you remove them or replace them? Does send mail provide similar functionality to postscreen

Re: FIlter

So I wonder if postscreen_dnsbl is enabled is it possible that mail get lost by mistake? Somehow some false positive? How do you maintain the list? > On 12/02/2017 09:09 PM, Junk wrote: >> Is there any list that can be trusted and is publicly available or >> unless you pay nothing is trusted? >>

Re: FIlter

headerRCVD_IN_LASHBACK_LASTEXT >>> eval:check_rbl('lashback-lastexternal', 'ubl.unsubscore.com.') >>> describeRCVD_IN_LASHBACK_LASTEXTLast external is listed in Lashback >>> ubl.unsubscore.com >>> scoreRCVD_IN_LASHB

Re: FIlter

On 12/02/2017 09:09 PM, Junk wrote: Is there any list that can be trusted and is publicly available or unless you pay nothing is trusted? See my previous list of postscreen_dnsbl_sites entries. These can be trusted in aggregate but not individually. Traditionally in MTAs, a single block

Re: FIlter

just a few... ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 -Original Message- From: Junk [mailto:j...@lexoncom.com] Sent: Friday, December 01, 2

Re: FIlter

Junk skrev den 2017-12-03 04:09: Is there any list that can be trusted and is publicly available or unless you pay nothing is trusted? if paid dont trust its same boat as let me hold your pocket

Re: FIlter

Is there any list that can be trusted and is publicly available or unless you pay nothing is trusted? > On Dec 2, 2017, at 7:44 PM, Bill Cole > wrote: > >> On 2 Dec 2017, at 13:33 (-0500), David Jones wrote: >> >> Then you can start experimenting with RBLs at >> http://multirbl.valli.org/lo

Re: FIlter

> On Dec 2, 2017, at 12:53 PM, John Hardin wrote: > > On Sat, 2 Dec 2017, Junk wrote: > >>> If you trust your Bayes you might consider implementing a BAYES_999 rule >>> that adds another point. >> >> I might look into it >> >>> Getting past URIBL_BLOCKED will help. >> >> Yes once it starte

Re: FIlter

here's a number of rulesets that I use - many are mentioned here in this >>> list and discussed so a look at the archives will probably be helpful. >>> >>> KAM - http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf >>> Hashcash >>> HashBL >>>

Re: FIlter

On 2 Dec 2017, at 13:33 (-0500), David Jones wrote: Then you can start experimenting with RBLs at http://multirbl.valli.org/lookup/ Be VERY careful with that list of DNSBLs. For years they listed and tested my local, private, never-public DNSBL (which has always had an external view that "li

Re: FIlter

On Sat, 2 Dec 2017, Junk wrote: If you trust your Bayes you might consider implementing a BAYES_999 rule that adds another point. I might look into it Getting past URIBL_BLOCKED will help. Yes once it started to work again there is less spam although i still get some that are formatted a

Re: FIlter

-- From: Junk [mailto:j...@lexoncom.com] Sent: Friday, December 01, 2017 1:36 PM To: Kevin Miller Cc: users@spamassassin.apache.org Subject: RE: FIlter Do you know any additional lists that could be added in addition to: - built ones - http://wiki.junkemailfilter.com - razors I have the spam score

Re: FIlter

ginal Message- > From: Junk [mailto:j...@lexoncom.com] > Sent: Friday, December 01, 2017 1:36 PM > To: Kevin Miller > Cc: users@spamassassin.apache.org > Subject: RE: FIlter > > Do you know any additional lists that could be added in addition to: > - built ones > - ht

Re: FIlter

> On Dec 1, 2017, at 7:07 PM, John Hardin wrote: > > On Fri, 1 Dec 2017, Junk wrote: > >> Thx for the tips. >> I will look at theses and try to implement. >> I definitely need more ways to get more scores so those that score 3.4-4.9 >> finally go over 5 and are marked spam. > > If you trust

Re: FIlter

On Fri, 1 Dec 2017, Junk wrote: Thx for the tips. I will look at theses and try to implement. I definitely need more ways to get more scores so those that score 3.4-4.9 finally go over 5 and are marked spam. If you trust your Bayes you might consider implementing a BAYES_999 rule that adds a

Re: FIlter

Thx for the tips. I will look at theses and try to implement. I definitely need more ways to get more scores so those that score 3.4-4.9 finally go over 5 and are marked spam. > On Dec 1, 2017, at 5:05 PM, Kevin Miller wrote: > > HashBL

RE: FIlter

er Cc: users@spamassassin.apache.org Subject: RE: FIlter Do you know any additional lists that could be added in addition to: - built ones - http://wiki.junkemailfilter.com - razors I have the spam score set to above to be 100% spam as i noticed what is below 5% sometimes falls into not a spam email.

RE: FIlter

; Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: > 307357 > > > -Original Message- > From: Junk [mailto:j...@lexoncom.com] > Sent: Friday, December 01, 2017 12:19 PM > To: Kevin Miller > Cc: users@spamassassin.apache.org > Subject: RE: FIlter > > I

RE: FIlter

586-4588 Registered Linux User No: 307357 -Original Message- From: Junk [mailto:j...@lexoncom.com] Sent: Friday, December 01, 2017 12:19 PM To: Kevin Miller Cc: users@spamassassin.apache.org Subject: RE: FIlter I do have scripts to go through 2 folders daily spam % ham but i noticed tha

RE: FIlter

586-0242, Fax: (907) 586-4588 Registered Linux User No: > 307357 > > > -Original Message- > From: Junk [mailto:j...@lexoncom.com] > Sent: Friday, December 01, 2017 9:55 AM > To: Kevin Miller > Cc: users@spamassassin.apache.org > Subject: RE: FIlter > >

RE: FIlter

ax: (907) 586-4588 Registered Linux User No: 307357 -Original Message- From: Junk [mailto:j...@lexoncom.com] Sent: Friday, December 01, 2017 9:55 AM To: Kevin Miller Cc: users@spamassassin.apache.org Subject: RE: FIlter Amazon does not block the dns but the URIBL blocks the requests coming

RE: FIlter

South Seward Street > Juneau, Alaska 99801 > Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 > -Original Message- > From: Junk [mailto:j...@lexoncom.com] > Sent: Friday, December 01, 2017 6:31 AM > To: Benny Pedersen > Cc: Junk; users@spam

RE: FIlter

pt. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 -Original Message- From: Junk [mailto:j...@lexoncom.com] Sent: Friday, December 01, 2017 6:31 AM To: Benny Pedersen Cc: Junk; users@spamassassin.apache.org Subject: Re:

Re: FIlter

right, did not read it correctly. > > > Am 01.12.2017 um 17:00 schrieb Junk: >> You calling me an idiot based on what? > > learn to read emails! > i repsonded to Benny's clueless "apt-get install bind9" > >> According to URIBL: >> >> Why are DNS queries from my cloud instances >> (AmazonEC2/Softlay

Re: FIlter

let me try if i can change the port to something else and then configure firewall to forward from that port to the dns server on my network. > > > Am 01.12.2017 um 01:22 schrieb Junk: >> I am aware of uridb blocked. >> My server is in amazon cloud and uridb is blocked. >> I do have private dns ser

Re: FIlter

You calling me an idiot based on what? According to URIBL: Why are DNS queries from my cloud instances (AmazonEC2/Softlayer/Rackspace/etc) blocked? Large subnets owned by Amazon and other cloud providers have been blocked due to high volume. Because amazon has so many networks, a single user may

Re: FIlter

> > if amazon cant allow you to do this you should change vps hoster > Its not amazons fault. It is URIDB blocking amazons subnets. >> My original question was about specific filter. > > i belive you would like uribl to work like junkmailfilter do > This still does not answer my original question.

Re: FIlter

dns server, eg it should just be listing on 127.0.0.1, and recolv.conf have just nameserver 127.0.0.1 if amazon cant allow you to do this you should change vps hoster My original question was about specific filter. i belive you would like uribl to work like junkmailfilter do

Re: FIlter

I understand your concern and I agree but like I said at this point I cannot get over the dns issue unless you give me a dns server ip that will respond to my queries for the uribl. My original question was about specific filter. > On Nov 30, 2017, at 6:59 PM, Benny Pedersen wrote: >

Re: FIlter

Junk skrev den 2017-12-01 01:22: I am aware of uridb blocked. My server is in amazon cloud and uridb is blocked. I do have private dns server caching only configured but my att dsl blocked dns port udp so I cannot use it. I was wondering if I could add other spam filter which I asked the

Re: FIlter

I am aware of uridb blocked. My server is in amazon cloud and uridb is blocked. I do have private dns server caching only configured but my att dsl blocked dns port udp so I cannot use it. I was wondering if I could add other spam filter which I asked the question about. > On Nov 30, 2017,

Re: FIlter

Junk skrev den 2017-11-30 23:46: Nov 30 16:45:22.663 [11935] dbg: uridnsbl: nt.ee . multi.uribl.com -> 127.0.0.1, URIBL_BLOCKED, subtest:1 fix this problem first https://wiki.apache.org/spamassassin/DnsBlocklists read above page for more help https://mail-archives.apache.org/mod_mbox/spamas

Re: Filter Non-ISO-8859-1 Text

On 10 Jan 2017, at 10:42, Michael B Allen wrote: PS2: Is there a tag that indicates that the message contains a large amount of non-latin1 text? I do get a lot of legitimate non-ISO-8859-1 messages but usually it's just a name or at most an address. So less than 100 bytes. Please start a ne

Filter Non-ISO-8859-1 Text

>> PS2: Is there a tag that indicates that the message contains a large >> amount of non-latin1 text? I do get a lot of legitimate non-ISO-8859-1 >> messages but usually it's just a name or at most an address. So less >> than 100 bytes. >> > > Please start a new thread and show us a sample of such

  1   2   3   4   5   6   7   8   9   10   >