On Sat, 24 Oct 2020 10:51:14 -0500
Ramon F Herrera wrote:
> ... I have found
> two important items. One relates to sendmail...
>
> (1) My first line of defense is the access.db sendmail file. It turns
> out that the only header that is actually inspected is the top line,
> which begins with "F
Discovery (1), which is sendmail related, has already been posted.
(2) Spamassassin issue:
I submitted two sets of spam messages to closer inspection. In the
first, spamassassin behaves as expected. In the "stealth" one, things do
not seem to be behaving as they should.
Each of the messages
On 12 Oct 2020, at 10:30, Ramon F Herrera wrote:
On 10/11/2020 1:21 PM, Bill Cole wrote:
On 11 Oct 2020, at 10:32, Ramon F Herrera wrote:
Good point.
spamd runs as root and sa-learn runs as 'ramon'.
That scheme has worked perfectly well for years, except for that
particular spam.
That C
> Can you please tell me how to generate that report?
I believe he is asking for the results of something like
spamassassin -t
On 10/11/2020 1:21 PM, Bill Cole wrote:
On 11 Oct 2020, at 10:32, Ramon F Herrera wrote:
Good point.
spamd runs as root and sa-learn runs as 'ramon'.
That scheme has worked perfectly well for years, except for that
particular spam.
That CAN work as long as you have spamd set up correctly
On Sun, 11 Oct 2020, Ramon F Herrera wrote:
There you go, Bill:
http://www.forcewise.com/~ramon/sysadmin/SolidWorks-SPAM
http://www.forcewise.com/~ramon/sysadmin/SolidWorks-SPAM.mbox (both files are
hardlinked)
Those don't particularly look like revenge spamming; they look more like
notific
On 11 Oct 2020, at 10:32, Ramon F Herrera wrote:
Good point.
spamd runs as root and sa-learn runs as 'ramon'.
That scheme has worked perfectly well for years, except for that
particular spam.
That CAN work as long as you have spamd set up correctly for per-user
Bayes. If it has worked befo
On Sun, 11 Oct 2020 16:52:09 +0200
Antony Stone wrote:
> 2. If it's stored in the wrong place, is there any way of
> transferring or merging it back in to where it should be instead?
If you dump both databases using 'sa-learn --backup' it's
straightforward to conflate the two ascii files into on
Ramon F Herrera skrev den 2020-10-11 17:20:
I am the one who is a client of sendgrid. Before subscribing to their
service (with low volume it is free) many of my messages were
rejected. They provide legitimacy. Highly recommended:
https://sendgrid.com/
and following this threads here your sen
Antony Stone skrev den 2020-10-11 16:52:
Are you running sa-learn as the same user that spamd runs as ?
Running sa-learn as root won't help the scores.
unless root trains global Bayes username
I've been aware of this advice / requirement almost since I started
using SA.
most users do it in
Hello,
On Sun, Oct 11, 2020 at 10:20:32AM -0500, Ramon F Herrera wrote:
> On 10/11/2020 10:07 AM, Marc Roos wrote:
> >Now you can decide to reject email coming from (the whole of) sendgrid.
>
> I am the one who is a client of sendgrid.
Are you aware that you've posted this to a list where it is
> I am the one who is a client of sendgrid. Before subscribing to their
service (with low volume it is free)
> many of my messages were rejected. They provide legitimacy.
So the problem here is actually that a spammer whines about being
spammed? :D But this does confirm my idea that one shoul
On 10/11/2020 10:07 AM, Marc Roos wrote:
o16789123x54.outbound-mail.sendgrid.net.
The specific range of sendgrid looks like this[1]. So now you know they
use sendgrid and probably have access to a 'limited' dynamic ip range.
Now you can decide to reject email coming from (the whole of) se
>
>
>I guess you are confused by my message and I am confused by yours.
Allow me to clarify.
Oops, did not notice jpg attachment. Better to post just text.
>I have 3 lines of defense and the 2 main ones have failed. The SPAM
messages are
> undetected. You tell me that the best way is to t
On Sunday 11 October 2020 at 16:28:12, Rick Macdougall wrote:
> Hi,
>
> Are you running sa-learn as the same user that spamd runs as ?
>
> Running sa-learn as root won't help the scores.
I've been aware of this advice / requirement almost since I started using SA.
However, I've never been quit
Good point.
spamd runs as root and sa-learn runs as 'ramon'.
That scheme has worked perfectly well for years, except for that
particular spam.
Thanks!
-Ramon
On 10/11/2020 9:28 AM, Rick Macdougall wrote:
Hi,
Are you running sa-learn as the same user that spamd runs as ?
Running sa-learn
Hi,
Are you running sa-learn as the same user that spamd runs as ?
Running sa-learn as root won't help the scores.
Regards,
Rick
On 2020-10-11 10:03 a.m., Ramon F Herrera wrote:
*Line of Defense No. 2:*
Spamassassin. It have submitted over a thousand messages as follows:
% sa-learn --spa
These forum messages probably have a common URL in them.
Use something like:
blacklist_uri_host solidworks.com
to score the common URL.
h2h
On 10/10/20 4:52 PM, Ramon F Herrera wrote:
Hello all:
I have been a very satisfied user of spamassassin for a long time. Now I
am facing a challenge, a
Very unclear problem description. First of al if you mark spam the
sender knows it is being received (and does not even know the message
has been marked). Thus the best way to treat spam, is rejecting it.
So without any other info. Start rejecting messages instead of accepting
them.
Start p
On 10 Oct 2020, at 10:52, Ramon F Herrera wrote:
Hello all:
I have been a very satisfied user of spamassassin for a long time. Now
I am facing a challenge, a problem that I cannot resolve.
Years ago I was an active participant in the SolidWorks forum:
https://forum.solidworks.com
Unfortuna
20 matches
Mail list logo