Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
mastodon.green is one of the many independent Mastodon servers you can use to participate in the fediverse.
Plant trees while you use Mastodon. A server originally for people in the EU, but now open for anyone in the world

Administered by:

Server stats:

1.2K
active users

mastodon.green: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#spamassassin

0 posts0 participants0 posts today
Replied to Santiago
Public
🆘Bill Cole 🇺🇦

@santiago FWIW, the automated rescoring that we (the SA Project of #TheASF) do for the default rule channel works on the assumption that the threshold is 5. If you reduce the threshold you should put in proactive work to improve (i.e. reduce) the scores of mail that you value.

E.g. I use a level of 4 & I use the supplementary KAM rules channel. I can only do that because the vast majority of the legit mail on my server is aimed at "more_spam_to" addresses.

#SpamAssassin
Public
🆘Bill Cole 🇺🇦

If you use #SpamAssassin and actually want mail sent to you from a subdomain of #wordpress.com, you will want to add that specifically to your local welcomelist. We've had reports of signed spam from such domains, so we cannot leave the wildcard in the "default welcomelist" in SA's rule channel.

This change just went into SVN and will take a day or two to appear in the channel.

Public
Arnaud Launay

Ah ben la dernière, c'est #Validity qui veut du pognon.

Donc, pour désactiver ces parasites dans #spamassassin :

ifplugin Mail::SpamAssassin::Plugin::DNSEval

header RCVD_IN_VALIDITY_RPBL eval:check_rbl('custom', '127.0.0.1')
header RCVD_IN_VALIDITY_SAFE eval:check_rbl('custom', '127.0.0.1')
header RCVD_IN_VALIDITY_CERTIFIED eval:check_rbl('custom', '127.0.0.1')
header RCVD_IN_VALIDITY_RPBL_BLOCKED eval:check_rbl('custom', '127.0.0.1')
header RCVD_IN_VALIDITY_SAFE_BLOCKED eval:check_rbl('custom', '127.0.0.1')
header RCVD_IN_VALIDITY_CERTIFIED_BLOCKED eval:check_rbl('custom', '127.0.0.1')

endif

Yippee-ki-yay, motherfucker !

Public
Heinlein Support

Du hast die Chemnitzer #Linux Tage 2025 verpasst? Kein Problem! Ab sofort findest Du die Videoaufzeichnung und die Vortragsfolien der beiden Heinlein-Vorträge auch in unserem Expertise-Blog.

👉 Du möchtest mehr über den #Ceph Orchestrator als Bestandteil eines Ceph-Storage-Systems erfahren?

heinlein-support.de/blog/vortr

👉 Für alle, die einen eigenen #Mailserver betreiben möchten: Was ist aktuell mit #SpamAssassin in der Spamabwehr möglich?

heinlein-support.de/blog/vortr

Referent Linux Vorträge
#clt2025#HeinleinVorträge
Public *
Marcos Dione

"The stats we collect for the #SpamAssassin project (mass-scan results from participating sites) have long shown that spammers are more consistent at making #SPF, #DKIM, and #DMARC correct than are legitimate senders. DMARC in particular has no discernible benefit for most senders, so it is a useless signal.

Rejecting mail based solely on authentication failures of those deeply flawed authentication methods does more harm than good."

jwz.org/blog/2025/03/dmarc-and

EDIT: h/t @grumpybozo

#mail
Replied in thread
Public
🆘Bill Cole 🇺🇦

@ghard @jwz We (the #SpamAssassin project) had support for HashCash for well over a decade. No one used it. No one cared enough to fix the plugin for recent versions, so we dropped it.
There's a strong argument that any form of "e-postage" is doomed. Spammers can hijack computing power in arbitrary amounts for paying it.

Replied in thread
Public
🆘Bill Cole 🇺🇦

@jwz The stats we collect for the #SpamAssassin project (mass-scan results from participating sites) have long shown that spammers are more consistent at making SPF, DKIM, and DMARC correct than are legitimate senders. DMARC in particular has no discernible benefit for most senders, so it is a useless signal.

Rejecting mail based solely on authentication failures of those deeply flawed authentication methods does more harm than good.

Public
Heinlein Support

Tag 2 der Chemnitzer Linux-Tage läuft. Wie immer eine großartige Veranstaltung mit spannenden Vorträgen und tollem Publikum. Nachdem unsere Kollegen gestern schon Vorträge zu #SpamAssassin und #Ceph halten durften, sind heute Vorträge von #OpenCloud und #OpenTalk im Programm.

Um 12 Uhr in Raum V7 geht's los - vor Ort oder im Live-Stream. Wir freuen uns auf Sie!

Zum Programm:
chemnitzer.linux-tage.de/2025/

CLT2025 Messestand Heinlein Gruppe
CLT2025 Messestand Heinlein Gruppe
#OpenSource#CLT2025#HeinleinGruppe
Public
🆘Bill Cole 🇺🇦

He's not wrong of course, but another useful function that #SpamAssassin users often overlook is the (newer) Transaction Reputation and (older) Auto-Welcome List (TxRep/AWL) subsystems.

The short form: The options -W or (—add-to-welcomelist) and --add-to-blocklist to the spamassassin script inject records for the addresses and IPs into the persistent reputation DB so that future similar messages get their scores skewed one way or the other, hard. mastodon.social/@jwz/114162761

Mastodonjwz (@jwz@mastodon.social)Attached: 1 image Spam pro tip. When a spam message gets past my shields and lands in my inbox, the first thing I do is look at the SpamAssassin headers to see if some rule fired whose priority I should bump up. Usually the answer is "Uggggghhhhhh no". It used to be... https://jwz.org/b/ykkV
Replied in thread
Public
🆘Bill Cole 🇺🇦

@msb A good choice. Doubling it again would not hurt, as I’ve seen a lot of PDF-bearing #spam which comes in over a megabyte.

The 512k limit is an artifact of when #SpamAssassin had some serious inefficiencies that we’ve worked hard to eliminate in recent years. If you're using 3.4.0 or later, large messages will be scanned much faster than in the past.

ExploreLive feeds
About