Re: RBL via Spamassasin configuration

2022-06-29 Thread Bill Cole
META: The message below seems to be a reply to a message by Harald Reindl, who was blocked from posting to this mailing list in the past for chronic unreasonably combative behavior. Unfortunately, there's no way to stop him from reading this mailing list via any of the public archives or a 's

Re: RBL via Spamassasin configuration

2022-06-29 Thread Matus UHLAR - fantomas
On 2022-06-29 10:25, Matus UHLAR - fantomas wrote: Since SpamAssassin does deep header scanning, it's more effective than just use incoming IP at MTA level. On 29.06.22 10:58, Benny Pedersen wrote: this is not good, its a sign of forwarding that forwards spam in the first place, that make the

Re: RBL via Spamassasin configuration

2022-06-29 Thread Benny Pedersen
On 2022-06-29 11:05, Marc wrote: I don't really get what you wrote. There is something for blocking at ip level, least resource intensive, and there is an application for doing the advanced header/body scans at a later stage. dont use deap ip scanning on dnsbl use deap content scanning is ok,

RE: RBL via Spamassasin configuration

2022-06-29 Thread Marc
> > On 2022-06-29 10:25, Matus UHLAR - fantomas wrote: > > Since SpamAssassin does deep header scanning, it's more effective than > > just use incoming IP at MTA level. > > this is not good, its a sign of forwarding that forwards spam in the > first place, that make the forwarding ip grey, not wh

Re: RBL via Spamassasin configuration

2022-06-29 Thread Benny Pedersen
On 2022-06-29 10:25, Matus UHLAR - fantomas wrote: Since SpamAssassin does deep header scanning, it's more effective than just use incoming IP at MTA level. this is not good, its a sign of forwarding that forwards spam in the first place, that make the forwarding ip grey, not white/wellcommed,

Re: RBL via Spamassasin configuration

2022-06-29 Thread Matus UHLAR - fantomas
Is this actually going out and doing a DNS query or reading from the header of the message? I think I want to actually do the DNS query and I will cache locally to avoid issues and increase performance. That is what dns servers do, cache. If you have your local dns, these requests are probably

Re: RBL via Spamassasin configuration

2022-06-28 Thread Benny Pedersen
On 2022-06-29 02:56, Joey J wrote: Hello All, not sure where I'm going wrong. in my custom.cf [3] I have #RBL's header RCVD_IN_ZENSPAMHAUS eval:check_rbl('zenspamhaus-lastexternal', 'zen.spamhaus.org.') describe RCVD_IN_ZENSPAMHAUS Relay is listed in zen.spamhaus.org [4] tflags RCVD_IN_ZENSPAMH

Re: RBL via Spamassasin configuration

2022-06-28 Thread Benny Pedersen
On 2022-06-28 23:22, Marc wrote: If you conclude something based on some month, there is no going back on this. I know people in IT that did not learn anything in 15 years. As for now, I am not really convinced by your arguments. Subject RE: RBL via Spamassasin configuration FromMarc To

Re: RBL via Spamassasin configuration

2022-06-28 Thread Joey J
Hello All, not sure where I'm going wrong. in my custom.cf I have #RBL's header RCVD_IN_ZENSPAMHAUS eval:check_rbl('zenspamhaus-lastexternal', 'zen.spamhaus.org.') describe RCVD_IN_ZENSPAMHAUS Relay is listed in zen.spamhaus.org tflags RCVD_IN_ZENSPAMHAUS net score RCVD_IN_ZENSPAMHAUS 5.0 if I qu

Re: RBL via Spamassasin configuration

2022-06-28 Thread Joey J
Thank you, this makes sense, I will look through the mentioned resource. On Tue, Jun 28, 2022 at 5:28 PM Bill Cole < sausers-20150...@billmail.scconsult.com> wrote: > On 2022-06-28 at 14:38:16 UTC-0400 (Tue, 28 Jun 2022 14:38:16 -0400) > Joey J > is rumored to have said: > > > Hello All, > > > >

RE: RBL via Spamassasin configuration

2022-06-28 Thread Marc
> biggest nonsense at all when it comes to spammes given that i added some > hundrets addresses never existed to collect the bodies for trainign and > for the outisde world they are still rejects (milter) How is the guessing of existing email addresses relevant to the current discussion?

Re: RBL via Spamassasin configuration

2022-06-28 Thread Bill Cole
On 2022-06-28 at 14:38:16 UTC-0400 (Tue, 28 Jun 2022 14:38:16 -0400) Joey J is rumored to have said: Hello All, In trying to setup RBL's with SA, I wanted to make sure the proper way to do it. I have seen some samples like this header RCVD_IN_BARRACUDACEN eval:check_rbl('bbarracuda-lastexter

RE: RBL via Spamassasin configuration

2022-06-28 Thread Marc
> BTW: "spammers also strife to optimize the usage of their resources" > shows that you know little to nothing! > > they are using infected machines all over they world > > that bot's are running completly without any feedback because it would > make it possible to track the origin > > even

RE: RBL via Spamassasin configuration

2022-06-28 Thread Marc
> > > Am 28.06.22 um 20:56 schrieb Marc: > > I also believe there is an advantage in rejecting messages, compared > to just marking them. Rejecting messages will train spam systems not to > try more. > > If they know you allow messages through, they will only send you more > > that's nonsense -

RE: RBL via Spamassasin configuration

2022-06-28 Thread Marc
> In trying to setup RBL's with SA, I wanted to make sure the proper way > to do it. > I have seen some samples like this > header RCVD_IN_BARRACUDACEN eval:check_rbl('bbarracuda-lastexternal', > 'b.barracudacentral.org.') > describe RCVD_IN_BARRACUDACEN Relay is listed in b.barracudacentral.org >

RBL via Spamassasin configuration

2022-06-28 Thread Joey J
Hello All, In trying to setup RBL's with SA, I wanted to make sure the proper way to do it. I have seen some samples like this header RCVD_IN_BARRACUDACEN eval:check_rbl('bbarracuda-lastexternal', 'b.barracudacentral.org.') describe RCVD_IN_BARRACUDACEN Relay is listed in b.barracudacentral.org tf