You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris <cp...@embarqmail.com> on 2007/05/27 05:01:28 UTC
How to tell you ISP their SA is misconfigured?
I believe I mentioned in a post earlier that my ISP/DSL provider, Embarq, quit
their contract with Earthlink and chose Synacor to provide mail service or so
I think. What I received from one of their QA guys says this:
> The Embarq side handles anything that is email client, browser or line
> problems. The admin for the actual servers is handled by Synacor. We
> have a dedicated group of lead techs here that make direct contact with
> Synacor when it is needed.
The complete messages that I'm discussing below can be seen here:
http://mediasafe.embarq.com/chris1948/Hosted/embarqAT1.txt
http://mediasafe.embarq.com/chris1948/Hosted/embarqBAYES2.txt
I read the above as saying Synacor handles the mail servers which includes
spam markups. I've been trying ever since the middle of April to get Embarq
to recognize that Synacor has a problem with their SA configuration, or so I
believe. For instance I have a spam that my SA marked up like this:
X-Spam-Status: Yes, score=17.2 required=5.0 tests=ADVANCE_FEE_2=1.234,
ADVANCE_FEE_3=1.432,ADVANCE_FEE_4=0.639,BAYES_60=2.002,BOTNET=5,
BOTNET_BADDNS=0,BOTNET_SERVERWORDS=0,DKIM_POLICY_SIGNSOME=0.001,
RAZOR2_CHECK=0.5,RCVD_IN_BL_SPAMCOP_NET=1.96,RDNS_NONE=0.1,SAGREY=1,
SARE_FRAUD_X3=1.667,SARE_FRAUD_X4=1.667 autolearn=disabled
version=3.2.0
Synacor's markup was quite a bit different:
Old-X-Spam-Status: Yes, score=12.351 tagged_above=-10 required=10
tests=[ADVANCE_FEE_1=0, ADVANCE_FEE_2=1.392, ADVANCE_FEE_3=3.336,
ADVANCE_FEE_4=3.727, ALL_TRUSTED=-1.8, BAYES_60=1,
DNS_FROM_RFC_ABUSE=0.2, DNS_FROM_RFC_POST=1.708,
DNS_FROM_RFC_WHOIS=1.447, RAZOR2_CHECK=0.5, UNDISC_RECIPS=0.841]
Yes, they tagged it correctly as spam, however, I can't see how ALL_TRUSTED
fired. Another problem I see is their Bayes is not working correctly. On the
spam below my SA setup gave it a BAYES_99:
X-Spam-Status: Yes, score=7.5 required=5.0 tests=BAYES_99=5,
DKIM_POLICY_SIGNSOME=0.001,DK_POLICY_SIGNSOME=0.001,DK_POLICY_TESTING=0.001,
HTML_MESSAGE=0.001,MIME_HTML_ONLY=1.457,SAGREY=1 autolearn=disabled
version=3.2.0
While they gave it a BAYES_00:
Old-X-Spam-Score: -1.598
Old-X-Spam-Level:
Old-X-Spam-Status: No, score=-1.598 tagged_above=-10 required=10
tests=[BAYES_00=-2.599, FRONTPAGE=0.886, HTML_90_100=0.113,
HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.001, UPPERCASE_25_50=0]
Emails to Synacor support go un-acknowledged, emails to the Embarq QA person
are acknowledged however, I don't see anything improvment other than when
this first started the 'required score' was 6.6. After a few weeks of my
complaining that every message I sent out was marked as [Possible Spam]
Synacor raised the required score to 10. Is there any other way, besides
constant emailing them, to tell them their SA setup is mis-configured?
Chris
--
Chris
KeyID 0xE372A7DA98E6705C
Re: How to tell you ISP their SA is misconfigured?
Posted by SM <sm...@resistor.net>.
At 20:01 26-05-2007, Chris wrote:
>I believe I mentioned in a post earlier that my ISP/DSL provider,
>Embarq, quit
>their contract with Earthlink and chose Synacor to provide mail service or so
>I think. What I received from one of their QA guys says this:
[snip]
>Synacor raised the required score to 10. Is there any other way, besides
>constant emailing them, to tell them their SA setup is mis-configured?
You have told them that several times. Your complaints did not go
unheard as they increased the score. But the core of the problem, a
misconfigured SA, is still unresolved.
If your ISP is not providing an adequate mail service, you can:
1. Keep complaining
2. Switch to a different ISP
3. Find a different mail provider
4. Use other channels to complain about the poor service
Regards,
-sm
Re: How to tell you ISP their SA is misconfigured?
Posted by Chris <cp...@embarqmail.com>.
On Saturday 26 May 2007 10:31 pm, Matt Kettler wrote:
> Chris wrote:
> > Old-X-Spam-Status: Yes, score=12.351 tagged_above=-10 required=10
> > tests=[ADVANCE_FEE_1=0, ADVANCE_FEE_2=1.392, ADVANCE_FEE_3=3.336,
> > ADVANCE_FEE_4=3.727, ALL_TRUSTED=-1.8, BAYES_60=1,
> > DNS_FROM_RFC_ABUSE=0.2, DNS_FROM_RFC_POST=1.708,
> > DNS_FROM_RFC_WHOIS=1.447, RAZOR2_CHECK=0.5, UNDISC_RECIPS=0.841]
> >
> > Yes, they tagged it correctly as spam, however, I can't see how
> > ALL_TRUSTED fired.
>
> Unless the email orignated within the ISP, they have a broken Trust
> Path. 5 bucks says they have their mailserver behind a static-mapped
> NAT, which confuses the trust-path auto-guesser, requiring a manual
> configuration.
>
> ALL_TRUSTED should *NEVER* mail that is not from your network or
> manually configured trusted sites.
>
> You could direct them to:
>
> http://wiki.apache.org/spamassassin/TrustPath
>
> However, getting an ISP to listen to anything reported by an end user is
> damn near impossible.
I've tried sending messages to Synacor support but have not even received an
acknowledgement to my messages so I'm inclined to think they're
being /dev/null'd. I did a whois lookup this evening and sent an email to
this person:
RTechHandle: AGH4-ARIN
RTechName: Howell, Adam Greg
RTechPhone: +1-716-853-1362
RTechEmail: ahowell@synacor.com
with some examples. I'm now just waiting for it to bounce.
--
Chris
KeyID 0xE372A7DA98E6705C
Re: How to tell you ISP their SA is misconfigured?
Posted by "Daryl C. W. O'Shea" <sp...@dostech.ca>.
Matt Kettler wrote:
> However, getting an ISP to listen to anything reported by an end user is
> damn near impossible.
Some ISPs like highly paid consultants. I'm available for $100/hr. :)
Daryl
Re: How to tell you ISP their SA is misconfigured?
Posted by Mark || Stream Service <qu...@streamservice.nl>.
It is easy to get an ISP to listen as long as it is small and you give some
examples of how it should be. If they aren't listening move to another ISP
is your best complain.
With kind regards, Met vriendelijke groet,
Mark Scholten
Stream Service (an ISP)
Web: http://www.streamservice.nl/
E-mail: mark@streamservice.nl
NOC: http://www.mynoc.eu/
NOC e-mail: noc@streamservice.nl
Tel.: +31 (0)642 40 86 02
Fax: +31 (0)20 20 101 57
KVK: 08141074
BTW: NL104278274B01
----- Original Message -----
From: "Matt Kettler" <mk...@verizon.net>
To: "Chris" <cp...@embarqmail.com>
Cc: <us...@spamassassin.apache.org>
Sent: Sunday, May 27, 2007 5:31 AM
Subject: Re: How to tell you ISP their SA is misconfigured?
> Chris wrote:
>> Old-X-Spam-Status: Yes, score=12.351 tagged_above=-10 required=10
>> tests=[ADVANCE_FEE_1=0, ADVANCE_FEE_2=1.392, ADVANCE_FEE_3=3.336,
>> ADVANCE_FEE_4=3.727, ALL_TRUSTED=-1.8, BAYES_60=1,
>> DNS_FROM_RFC_ABUSE=0.2, DNS_FROM_RFC_POST=1.708,
>> DNS_FROM_RFC_WHOIS=1.447, RAZOR2_CHECK=0.5, UNDISC_RECIPS=0.841]
>>
>> Yes, they tagged it correctly as spam, however, I can't see how
>> ALL_TRUSTED
>> fired.
>
> Unless the email orignated within the ISP, they have a broken Trust
> Path. 5 bucks says they have their mailserver behind a static-mapped
> NAT, which confuses the trust-path auto-guesser, requiring a manual
> configuration.
>
> ALL_TRUSTED should *NEVER* mail that is not from your network or
> manually configured trusted sites.
>
> You could direct them to:
>
> http://wiki.apache.org/spamassassin/TrustPath
>
> However, getting an ISP to listen to anything reported by an end user is
> damn near impossible.
>
>
Re: How to tell you ISP their SA is misconfigured?
Posted by Matt Kettler <mk...@verizon.net>.
Chris wrote:
> Old-X-Spam-Status: Yes, score=12.351 tagged_above=-10 required=10
> tests=[ADVANCE_FEE_1=0, ADVANCE_FEE_2=1.392, ADVANCE_FEE_3=3.336,
> ADVANCE_FEE_4=3.727, ALL_TRUSTED=-1.8, BAYES_60=1,
> DNS_FROM_RFC_ABUSE=0.2, DNS_FROM_RFC_POST=1.708,
> DNS_FROM_RFC_WHOIS=1.447, RAZOR2_CHECK=0.5, UNDISC_RECIPS=0.841]
>
> Yes, they tagged it correctly as spam, however, I can't see how ALL_TRUSTED
> fired.
Unless the email orignated within the ISP, they have a broken Trust
Path. 5 bucks says they have their mailserver behind a static-mapped
NAT, which confuses the trust-path auto-guesser, requiring a manual
configuration.
ALL_TRUSTED should *NEVER* mail that is not from your network or
manually configured trusted sites.
You could direct them to:
http://wiki.apache.org/spamassassin/TrustPath
However, getting an ISP to listen to anything reported by an end user is
damn near impossible.