You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Benny Pedersen <me...@junc.eu> on 2013/08/01 12:34:26 UTC
Re: Creating new rules
Jari Fredriksson skrev den 2013-07-31 22:04:
> 31.07.2013 21:05, Franck Martin kirjoitti:
>> Ah yes, I saw these rules, but this is to check the domains of urls
>> in
>> the messages, not to check for instance that the domain used in the
>> From: header is on the DBL.
> Address in From: is usually always forged in Spam nowadays. There is
> not
> much use for checking these.
http://blog.returnpath.com/blog/ken-takahashi/demystifying-spf-dkim-and-dmarc
> AWL plugin does it anyway, if enabled. But it does not use any
> external
> backlists for it...
if its runs with default /16 is just a joke
change it to /24 or /32 then its more no joke
when this is done, add sagrey plugin, stops one time senders
sa 3.4.0 should have history plugin but its missing in 3.4.0-rc2
Re: Creating new rules
Posted by RW <rw...@googlemail.com>.
On Thu, 01 Aug 2013 19:08:12 +0200
Benny Pedersen wrote:
> RW skrev den 2013-08-01 18:00:
>
> > If you use /32 and the sender has a different IP address each time
> > there's no score averaging.
>
> servers changeing sender ip daily ?, its not a real problem clients
> does, there would be one static ip first
I think you have first and last the wrong way around. If the client has
a public IP address (as recorded by the submission server) then that's
the *first* routable address. With webmail the browser ip address is
used if it's recorded in a header.
Re: Creating new rules
Posted by Benny Pedersen <me...@junc.eu>.
RW skrev den 2013-08-01 18:00:
> If you use /32 and the sender has a different IP address each time
> there's no score averaging.
servers changeing sender ip daily ?, its not a real problem clients
does, there would be one static ip first
Re: Creating new rules
Posted by RW <rw...@googlemail.com>.
On Thu, 01 Aug 2013 16:36:22 +0200
Benny Pedersen wrote:
> RW skrev den 2013-08-01 14:39:
>
> > This would make sense if the IP address were the the first trusted
> > address or last external, but AWL uses the first routable address
> > which
> > is commonly dynamic.
>
> why is this in error ?
If you use /32 and the sender has a different IP address each time
there's no score averaging.
Re: Creating new rules
Posted by Benny Pedersen <me...@junc.eu>.
RW skrev den 2013-08-01 14:39:
> This would make sense if the IP address were the the first trusted
> address or last external, but AWL uses the first routable address
> which
> is commonly dynamic.
why is this in error ?
Re: Creating new rules
Posted by RW <rw...@googlemail.com>.
On Thu, 01 Aug 2013 12:34:26 +0200
Benny Pedersen wrote:
> Jari Fredriksson skrev den 2013-07-31 22:04:
> > AWL plugin does it anyway, if enabled. But it does not use any
> > external
> > backlists for it...
>
> if its runs with default /16 is just a joke
>
> change it to /24 or /32 then its more no joke
This would make sense if the IP address were the the first trusted
address or last external, but AWL uses the first routable address which
is commonly dynamic.