Conversation

Notices

1. Bernie (codewiz@mstdn.io)'s status on Saturday, 17-Dec-2022 16:23:37 UTC Bernie

   Wow, #SpamAssassin is still alive!
   https://www.phoronix.com/news/Apache-SpamAssassin-4.0

   I use an old version for my self-hosted #email but plenty of #spam goes through it these days.

   • Bernie (codewiz@mstdn.io)'s status on Saturday, 17-Dec-2022 19:56:03 UTC Bernie

     in reply to

     • Beko Pharm
     • 🆘Bill Cole 🇺🇦

     @grumpybozo @bekopharm Thank you ❤️

   • 🆘Bill Cole 🇺🇦 (grumpybozo@toad.social)'s status on Saturday, 17-Dec-2022 19:56:04 UTC 🆘Bill Cole 🇺🇦

     in reply to

     • Beko Pharm

     @bekopharm @codewiz

     #ASF #SpamAssassin PMC member here:

     Nope. There's a Naive Bayesian plugin that you can use with training but the default rules do a decent job even if you don't enable or train the Bayes DB. We have a QA process for the default rules that adjusts scoring daily and an active core team creating and testing new rules all the time.

     #email #spam

   • Beko Pharm (bekopharm@social.tchncs.de)'s status on Saturday, 17-Dec-2022 19:56:05 UTC Beko Pharm

     in reply to

     @codewiz that thing needs training so you have to feed it spam in order to work, no? 🙃

   • Bernie (codewiz@mstdn.io)'s status on Saturday, 17-Dec-2022 21:15:34 UTC Bernie

     in reply to

     • Benoit

     @benoit Another friend recommended it. I'll give it a try.

   • Benoit (benoit@toots.benpro.fr)'s status on Saturday, 17-Dec-2022 21:15:35 UTC Benoit

     in reply to

     @codewiz rspamd is amazing.

   • Bernie (codewiz@mstdn.io)'s status on Saturday, 17-Dec-2022 21:31:59 UTC Bernie

     in reply to

     • Beko Pharm
     • 🆘Bill Cole 🇺🇦

     Help! Spammers from the future are targeting me! 😩
     @grumpybozo @bekopharm

   • Bernie (codewiz@mstdn.io)'s status on Saturday, 17-Dec-2022 21:36:18 UTC Bernie

     in reply to

     • Beko Pharm
     • 🆘Bill Cole 🇺🇦

     The real problem is that I'm still using a #SpamAssassin from the past!
     @grumpybozo @bekopharm

   • Bernie (codewiz@mstdn.io)'s status on Saturday, 17-Dec-2022 21:47:36 UTC Bernie

     in reply to

     • makuharigaijin

     @makuharigaijin I do have grey listing, and it makes it very painful to receive verification emails from sites using a large pool of IPs for delivery.

   • makuharigaijin (makuharigaijin@fosstodon.org)'s status on Saturday, 17-Dec-2022 21:47:37 UTC makuharigaijin

     in reply to

     @codewiz
     Greylisting remains the most effective spam fighting tool I use, in addition to the others.

   • Bernie (codewiz@mstdn.io)'s status on Sunday, 18-Dec-2022 00:27:28 UTC Bernie

     in reply to

     • Beko Pharm
     • 🆘Bill Cole 🇺🇦

     zen.spamhaus.org and dbl.spamhaus.org don't resolve at all. Are they still active?

     @grumpybozo @bekopharm

   • 🆘Bill Cole 🇺🇦 (grumpybozo@toad.social)'s status on Sunday, 18-Dec-2022 00:27:29 UTC 🆘Bill Cole 🇺🇦

     in reply to

     • Beko Pharm

     @codewiz @bekopharm
     Also: 2 very useful DNSBL's are apparently blocking your chosen DNS resolver. And it's odd that SA didn't flag the date as being bogus.

   • Bernie (codewiz@mstdn.io)'s status on Sunday, 18-Dec-2022 01:08:45 UTC Bernie

     in reply to

     • Benoit
     • makuharigaijin

     @benoit @makuharigaijin My SpamAssassin config is really old and doesn't even score a failing DKIM check as a serious problem...

   • Benoit (benoit@toots.benpro.fr)'s status on Sunday, 18-Dec-2022 01:08:50 UTC Benoit

     in reply to

     • makuharigaijin

     @makuharigaijin @codewiz But, most of the time, websites use proper mail sending platforms with DKIM, ARC, etc. like AWS SES, mailgun, mailjet, etc. Where sender IPs and domain are well known, score probably low, so will not even be grey listed.

   • Benoit (benoit@toots.benpro.fr)'s status on Sunday, 18-Dec-2022 01:08:57 UTC Benoit

     in reply to

     • makuharigaijin

     @makuharigaijin @codewiz I don't have this issue, on mailcow, greylisting is applied by rspamd if the mail is getting a score near the spam flag score.
     Basically to wait a little bit if the score will increase like sender finally appearing in a RBL.
     Then it will be flagged spam or even rejected if score too high.

     Basically:
     Near flag spam score and new sender domain/IP?
     Wait...
     Score increased? Reject or flag spam
     Otherwise, normal delivery. 1/2

   • makuharigaijin (makuharigaijin@fosstodon.org)'s status on Sunday, 18-Dec-2022 01:08:58 UTC makuharigaijin

     in reply to

     @codewiz
     Yeah, that is a downside. It is not bad for my family and me as we expect it, but it would be tough to host for a more general user base.

   • Benoit (benoit@toots.benpro.fr)'s status on Sunday, 18-Dec-2022 03:25:33 UTC Benoit

     in reply to

     • makuharigaijin

     @makuharigaijin @codewiz why not use a catch-all?

     You can still have accounts that will not go the catch-all.

     kid@domain.com
     dad@domain.com
     *@domain.com --> go-to dad@domain.com.

   • makuharigaijin (makuharigaijin@fosstodon.org)'s status on Sunday, 18-Dec-2022 03:25:34 UTC makuharigaijin

     in reply to

     • Benoit

     @benoit @codewiz
     Maybe what I should do is create a script to automate alias creation that I could run from both my daily driver and my phone. If it is less that a couple of clicks away, I'll use it more.

   • makuharigaijin (makuharigaijin@fosstodon.org)'s status on Sunday, 18-Dec-2022 03:25:35 UTC makuharigaijin

     in reply to

     • Benoit

     @benoit @codewiz
     I heavily use the <user>+<label>@domain thing to have my various external account emails get auto-sorted into their own folders. However, sometimes a service doesn't like the '+' delimiter and I either just use my main address or spend a couple minutes logging into the mailcow web page to manually create anew alias, which is a bit of pain. I asked the MC team about adding custom delimiters, but it is fairly involved.

   • Benoit (benoit@toots.benpro.fr)'s status on Sunday, 18-Dec-2022 03:25:38 UTC Benoit

     in reply to

     • makuharigaijin

     @makuharigaijin @codewiz I basically get one spam a week. I love my Mailcow setup.

     But that's because I use a catch-all, with a unique email for each websites.
     A quick list of recent banned emails that I blocked because they leaked:

     legerwallet@benpro.fr
     wakanim@benpro.fr
     kyoanishop@benpro.fr
     uphold@benpro.fr

     The only problem is the other way... Especially sending mail to Microsoft MTAs, high chance of getting marked as spam or rejected.

   • makuharigaijin (makuharigaijin@fosstodon.org)'s status on Sunday, 18-Dec-2022 03:25:39 UTC makuharigaijin

     in reply to

     • Benoit

     @benoit @codewiz
     Ah, so that is what it is doing. Smart. It does indeed feel rare that I have to wait.
     I'll also say that the amount of spam I got when I was on google a few years ago, vs after I migrated to selfhosting mailcow, was shocking. My spam dropped to almost nothing, where is was maybe ~5-20 messages a day that got through on google. Makes me wonder.

   • makuharigaijin (makuharigaijin@fosstodon.org)'s status on Sunday, 18-Dec-2022 03:26:04 UTC makuharigaijin

     in reply to

     • Benoit

     @benoit @codewiz
     I used a catch-all many years ago when I rolled my own email stack. I abandoned that at the time as I would get more spam. I suppose it would not be too bad if I set up a dovecot rule to auto create folders for each as they came in or something. Also, this would only help me within the user-base as only one can be the catch-all recipient. Thinking...

   • Bernie (codewiz@mstdn.io)'s status on Sunday, 18-Dec-2022 05:32:09 UTC Bernie

     in reply to

     • Beko Pharm
     • 🆘Bill Cole 🇺🇦

     Oh, I see. Our email server is querying Spamhaus' DNSBL via the ISP's recursive resolvers.

     I think I have fixed it by redirecting #SpamAssassin to the local BIND instance via "dns_server 127.0.0.1".

     Thank you for your help!

     @grumpybozo @bekopharm

   • 🆘Bill Cole 🇺🇦 (grumpybozo@toad.social)'s status on Sunday, 18-Dec-2022 05:32:10 UTC 🆘Bill Cole 🇺🇦

     in reply to

     • Beko Pharm

     @codewiz @bekopharm
     Yes. They have NS records, but there is no reason for them to have A records. HOWEVER: you can't use those through an open public resolver. See https://www.spamhaus.org/faq/section/DNSBL%20Usage for details.