You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2008/09/16 19:07:49 UTC

[Bug 5977] New: too many FP's for RCVD_IN_BSP_TRUSTED

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977

           Summary: too many FP's for RCVD_IN_BSP_TRUSTED
           Product: Spamassassin
           Version: 3.2.5
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Rules (Eval Tests)
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: scheidell@secnap.net


it is MORE like that having a bonded sender is more likely unwanted spam than
not.

when we can get spammed to a 'group account' that could not have been found
except by web site harvesting, this puts the whole 'bonded sender' program in
question.

there should NOT be such a huge credit given for these 'bonded spammers'.

example:
spam received from 72.2.32.94 to a group address.
again, no are way there was any subscription.

host 94.32.2.72.sa-trusted.bondedsender.org
94.32.2.72.sa-trusted.bondedsender.org has address 127.0.0.10


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977


Sidney Markowitz <si...@sidney.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX




--- Comment #3 from Sidney Markowitz <si...@sidney.com>  2008-09-16 12:58:10 PST ---
The whole point of the bonded sender is that you have a place to make a
complaint if you see something  like this, and the sender will lose real money
and lose their bonded sender status if they are spamming and don't stop.

As long as that process does work then there is justification for keeping the
rule as it will indicate that the sender is not likely to be spamming.

If you do report these people and do not receive a satisfactory result, then
that would be a bug to report.

So far it is working as designed.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977





--- Comment #11 from Matt Kettler <mk...@verizon.net>  2009-02-06 15:40:19 PST ---
Neil Responded back to the PMC with:
---------------------
FYI sa-abuse@senderscorecertified.com is now tested, active and pointed at a
fresh new RT queue for our perusal. Fire away!

And please do inform your community. Thanks for your patience in this
regard. If you need anything else, by all means, let us know.
----------------------


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977





--- Comment #9 from Matt Kettler <mk...@verizon.net>  2008-09-17 18:19:55 PST ---
I've sent an email to Tom, cc'ing the PMC list. We'll see what we get back.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977


Theo Van Dinter <fe...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|WONTFIX                     |




--- Comment #4 from Theo Van Dinter <fe...@apache.org>  2008-09-16 13:25:28 PST ---
While I agree that the proper process is to report these and charge the senders
money, one of the main issues right now seems to be that there's no obvious way
to report the offenders.

The old complaint URL for bondedsender (http://www.bondedsender.org/complaint/)
now goes to the generic marketing page.  Searching for a complaint or report
page or address results in nothing, and there's nothing obvious on the return
path site just going around.

So I think we need to reach out to them and find out why they've made it so
difficult and what should people use as the reporting method/address.  If that
results in nothing useful, then I'm +1 for removing them, but it's not
appropriate to do that w/out some due diligence.

FWIW, from the last weekly net run, my results:

  0.089   0.0000   1.9826    0.000   0.62    0.00  RCVD_IN_BSP_TRUSTED

group results:

  0.101   0.0004   1.6258    0.000   0.72    0.00  RCVD_IN_BSP_TRUSTED

So things don't seem too outrageous from that perspective.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977





--- Comment #5 from Sidney Markowitz <si...@sidney.com>  2008-09-16 14:11:33 PST ---
(reply to comment #4)

If the change in ownership has made it more difficult to report problems then I
agree with keeping this bug open until these questions are resolved, and I am
also +1 for dropping the rule if they are no longer doing their job.

Of course, someone has to follow up on the due diligence :-)


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977


Matt Kettler <mk...@verizon.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mkettler_sa@verizon.net




--- Comment #6 from Matt Kettler <mk...@verizon.net>  2008-09-16 19:10:31 PST ---
*** Bug 5978 has been marked as a duplicate of this bug. ***


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977





--- Comment #7 from Matt Kettler <mk...@verizon.net>  2008-09-16 19:12:14 PST ---
I can go ahead and contact Tom Bartel from bug 5476, unless someone else would
rather jump on it.

In my own investigations (including registering on the senderscore.org site) I
could not find any way to report abuse.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977





--- Comment #10 from Karsten Bräckelmann <gu...@rudersport.de>  2009-02-06 06:52:10 PST ---
(In reply to comment #9)
> I've sent an email to Tom, cc'ing the PMC list. We'll see what we get back.

Matt, did that result in anything?


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977





--- Comment #1 from mouss <mo...@netoyen.net>  2008-09-16 11:25:45 PST ---
so this is an FN, not an FP, right?

That said, I wouldn't be against removing habeas and bonded sender...


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977





--- Comment #2 from Alex Broens <al...@gmail.com>  2008-09-16 12:20:02 PST ---
FWI: +1


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977


J.D. Falk, Return Path <jd...@returnpath.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jdfalk@returnpath.net




-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977

anfi <an...@onet.eu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |anfi@onet.eu

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5977] too many FP's for RCVD_IN_BSP_TRUSTED

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5977





--- Comment #8 from Justin Mason <jm...@jmason.org>  2008-09-17 02:07:01 PST ---
btw, it's called "sender score certified" these days.
http://www.returnpath.net/senderscore/receiver/feedback/ seems to suggest that
a feedback loop is how they expect it to work, but that's only viable for ISPs.
 We need a better way.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.