Re: From Spoofed

2020-03-02 Thread @lbutlr
On 02 Mar 2020, at 09:32, Robert A. Ober wrote: > On 2/26/20 9:54 AM, Bill Cole wrote: >> >> Which puts you in the top 99.999th percentile of email server skills >> worldwide! > Ha, I hope that's wrong:-) I’m sure it is, it’s more like 99.999% Do we think there are 80,000 people in the world

Re: From Spoofed

2020-03-02 Thread Robert A. Ober
On 2/26/20 9:54 AM, Bill Cole wrote: On 26 Feb 2020, at 10:16, Robert A. Ober wrote:  don't participate because I'm just good enough to maintain my customers email servers, Which puts you in the top 99.999th percentile of email server skills worldwide! –– Ha, 

Re: From Spoofed

2020-02-27 Thread Bill Cole
On 27 Feb 2020, at 8:12, RW wrote: > On Tue, 25 Feb 2020 22:43:04 -0500 > Bill Cole wrote: > >> On 25 Feb 2020, at 20:28, Robert A. Ober wrote: >> >>>     Hey Folks, >>> >>> I have a user that is getting many emails with obscene subjects. >>> Someone is spoofing the From to include the users domai

Re: From Spoofed

2020-02-27 Thread RW
On Tue, 25 Feb 2020 22:43:04 -0500 Bill Cole wrote: > On 25 Feb 2020, at 20:28, Robert A. Ober wrote: > > >     Hey Folks, > > > > I have a user that is getting many emails with obscene subjects. > > Someone is spoofing the From to include the users domain so the > > email is hitting "USER_IN_WH

Re: From Spoofed

2020-02-26 Thread Bill Cole
On 26 Feb 2020, at 10:16, Robert A. Ober wrote: don't participate because I'm just good enough to maintain my customers email servers, Which puts you in the top 99.999th percentile of email server skills worldwide! -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and

Fwd: Re: From Spoofed

2020-02-26 Thread Robert A. Ober
l have some fun, Robert Forwarded Message Subject: Re: From Spoofed Date: Wed, 26 Feb 2020 08:34:16 -0600 From: Robert A. Ober To: David B Funk On 2/25/20 9:04 PM, David B Funk wrote: On Wed, 26 Feb 2020, Benny Pedersen wrote: Robert A. Ober skrev den 2020-02-26

Re: From Spoofed

2020-02-26 Thread Brent Clark
emails are being blocked. -Original Message- To: users@spamassassin.apache.org Subject: From Spoofed Hey Folks, I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHIT

RE: From Spoofed

2020-02-26 Thread Marc Roos
You should maintain also your own rbl with soft and hard blocking of ip ranges. Problem with only marking emails is, is that the spam network is not 'learning' that their emails are being blocked. -Original Message- To: users@spamassassin.apache.org Subject: From Spoofe

Re: From Spoofed

2020-02-25 Thread Bill Cole
On 25 Feb 2020, at 20:28, Robert A. Ober wrote:     Hey Folks, I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST".  I have installed the plugins from extremeshok and it has not

Re: From Spoofed

2020-02-25 Thread John Hardin
On Tue, 25 Feb 2020, Robert A. Ober wrote: I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST". Does the user's domain have either SPF or DKIM enabled so that the mail can be mor

Re: From Spoofed

2020-02-25 Thread David B Funk
On Wed, 26 Feb 2020, Benny Pedersen wrote: Robert A. Ober skrev den 2020-02-26 02:28: I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST". I have installed the plugins from extrem

Re: From Spoofed

2020-02-25 Thread Benny Pedersen
Robert A. Ober skrev den 2020-02-26 02:28: I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST". I have installed the plugins from extremeshok and it has not stopped the problem. r

From Spoofed

2020-02-25 Thread Robert A. Ober
    Hey Folks, I have a user that is getting many emails with obscene subjects. Someone is spoofing the From to include the users domain so the email is hitting "USER_IN_WHITELIST".  I have installed the plugins from extremeshok and it has not stopped the problem.   Emails have header info s

Re: How to get rid of spam with From spoofed to my own domain

2011-09-12 Thread Paul Russell
On 9/11/2011 20:02, John Hardin wrote: On Sun, 11 Sep 2011, René Berber wrote: On 9/11/2011 3:47 PM, rutra80 wrote: Hello, lately I receive spam which looks like coming from my domain, sometimes it is spoofed like coming from accounts that don't exist, and sometimes from the ones that really

Re: How to get rid of spam with From spoofed to my own domain

2011-09-12 Thread Jack L. Stone
Date: Sun, 11 Sep 2011 17:02:58 -0700 (PDT) From: John Hardin To: users@spamassassin.apache.org Subject: Re: How to get rid of spam with From spoofed to my own domain On Sun, 11 Sep 2011, René Berber wrote: > On 9/11/2011 3:47 PM, rutra80 wrote: > > > Hello, lately I receive spam

Re: How to get rid of spam with From spoofed to my own domain

2011-09-11 Thread Benny Pedersen
On Sun, 11 Sep 2011 17:02:58 -0700 (PDT), John Hardin wrote: On Sun, 11 Sep 2011, René Berber wrote: On 9/11/2011 3:47 PM, rutra80 wrote: Hello, lately I receive spam which looks like coming from my domain, sometimes it is spoofed like coming from accounts that don't exist, and sometimes fro

Re: How to get rid of spam with From spoofed to my own domain

2011-09-11 Thread John Hardin
On Sun, 11 Sep 2011, René Berber wrote: On 9/11/2011 3:47 PM, rutra80 wrote: Hello, lately I receive spam which looks like coming from my domain, sometimes it is spoofed like coming from accounts that don't exist, and sometimes from the ones that really do. The only SA rule that it triggers is

Re: How to get rid of spam with From spoofed to my own domain

2011-09-11 Thread Martin Gregorie
On Mon, 2011-09-12 at 01:02 +0200, m...@smtp.fakessh.eu wrote: > to say a little something > > run openspf software on my host > > and I'm having weird problems in the mail > You're talking about something quite different: creating an SPF record *FOR YOUR DOMAIN* has no effect whatsoever on you

Re: How to get rid of spam with From spoofed to my own domain

2011-09-11 Thread m...@smtp.fakessh.eu
Le lundi 12 septembre 2011 00:35, Dave Funk a écrit : > On Sun, 11 Sep 2011, Martin Gregorie wrote: > > On Sun, 2011-09-11 at 13:47 -0700, rutra80 wrote: > >> Hello, lately I receive spam which looks like coming from my domain, > >> sometimes it is spoofed like coming from accounts that don't exist

Re: How to get rid of spam with From spoofed to my own domain

2011-09-11 Thread René Berber
On 9/11/2011 5:35 PM, Dave Funk wrote: [snip] >> Set up an SPF record for your domain and make sure its valid by testing >> it with a validation tool. You missed this point. > However a simple SPF fail doesn't score many points. To deal with the > exact same issue I added a custom local rule (a

Re: How to get rid of spam with From spoofed to my own domain

2011-09-11 Thread Dave Funk
On Sun, 11 Sep 2011, Martin Gregorie wrote: On Sun, 2011-09-11 at 13:47 -0700, rutra80 wrote: Hello, lately I receive spam which looks like coming from my domain, sometimes it is spoofed like coming from accounts that don't exist, and sometimes from the ones that really do. The only SA rule tha

Re: How to get rid of spam with From spoofed to my own domain

2011-09-11 Thread Martin Gregorie
On Sun, 2011-09-11 at 13:47 -0700, rutra80 wrote: > Hello, lately I receive spam which looks like coming from my domain, > sometimes it is spoofed like coming from accounts that don't exist, and > sometimes from the ones that really do. The only SA rule that it triggers is > Bayesian one, with near

Re: How to get rid of spam with From spoofed to my own domain

2011-09-11 Thread René Berber
On 9/11/2011 3:47 PM, rutra80 wrote: > Hello, lately I receive spam which looks like coming from my domain, > sometimes it is spoofed like coming from accounts that don't exist, and > sometimes from the ones that really do. The only SA rule that it triggers is > Bayesian one, with nearly 100% prob