fosstodon.org is one of the many independent Mastodon servers you can use to participate in the fediverse.
Fosstodon is an invite only Mastodon instance that is open to those who are interested in technology; particularly free & open source software. If you wish to join, contact us for an invite.

Administered by:

Server stats:

8.6K
active users

#spamassassin

0 posts0 participants0 posts today
noahm<p>If you're using <a href="https://chaos.social/tags/spamassassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>spamassassin</span></a> on <a href="https://chaos.social/tags/debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>debian</span></a>, please consider testing the 4.0.2-rc1 packages. They're currently in experimental for unstable and built for bookworm in the bookworm-backports suite in my personal repo on people.debian.org. <a href="https://people.debian.org/~noahm/repo/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">people.debian.org/~noahm/repo/</span><span class="invisible"></span></a></p><p>My plan is to update bookworm and trixie point releases to 4.0.2 once it's releases, so all the testing I can get is helpful. Please report any issues via the BTS or directly to me directly.</p>
Bruce Heerssen<p>Whew. I think I finally got spamass-milter talking to spamd. At least, there's no errors in the logs and my test emails arrive in a reasonable time frame.</p><p>Now just to wait for more spam.</p><p><a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Postfix</span></a> <a href="https://darkmoon.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a></p>
André Claaßen<p>Größte persönliche IT-Innovation im letzten Jahr war <a href="https://ruhr.social/tags/Spamassassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Spamassassin</span></a>. Bin so froh, dass es das Tool gibt. Jeder Spammer bekommt sein Fett weg.</p><p><a href="https://ruhr.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> <a href="https://ruhr.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OpenSource</span></a></p>
🆘Bill Cole 🇺🇦<p>Does anyone know if <a href="https://toad.social/tags/Copilot" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Copilot</span></a> or any other supposed “AI" LLM is anything but total dogshit with Perl? </p><p>I ask because so far we have not had any bug reports or rule contributions or *anything* seemingly LLM-generated for <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a>. This is good. However, it makes me wonder if it isn't a larger issue. Which would also be good.</p>
🆘Bill Cole 🇺🇦<p>The people committed to DDoSing the <a href="https://toad.social/tags/Apache" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Apache</span></a> <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> RuleQA server seem to have substantial resources. I’ve blocked a lot of them, but they keep coming, asking about things like the May 7 2017 performance of a single rule in one contributor's stats. Not stuff real people want. </p><p>Of course, there's a resource they do not have. Our sysadmins, both those employed by <a href="https://toad.social/tags/TheASF" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>TheASF</span></a> to watch all of our infra and the volunteer cadre focused on SA. We'll keep whacking the moles... </p><p><a href="https://toad.social/tags/Sysadminnery" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Sysadminnery</span></a></p>
🆘Bill Cole 🇺🇦<p><span class="h-card" translate="no"><a href="https://io.mwl.io/@mwl" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>mwl</span></a></span> <span class="h-card" translate="no"><a href="https://helvede.net/@m" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>m</span></a></span> That’s quite a feat. The past few years it seems like each release has deprecations that hit formerly normal stuff. We’ve had a couple of these hit <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> hard.</p>
🆘Bill Cole 🇺🇦<p>We’ve had a few hair-on-fire bug reports for <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> and twice people have tried nagging me personally into “fixing” their pet problems RIGHT NOW because it was supposedly world-ending. <br> <br>Thankfully, none of these have even been real bugs. </p><p>But even if they were, having the cultural permission to say “No” is critical. <a href="https://mastodon.social/@mhoye/114705284226501374" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">mastodon.social/@mhoye/1147052</span><span class="invisible">84226501374</span></a></p>
DD3AH 📡📶 🏳️‍🌈🌐<p><a href="https://social.darc.de/tags/Spam" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Spam</span></a> droht mir, dass meine Domain ein Copyright verletzt. Das ZIP lässt sich nicht mal öffnen.</p><p>Es war gut genug, um <a href="https://social.darc.de/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> und den Thunderbird zu überlisten. Im Wesentlichen wohl, weil es sehr wenig Text war, auf den etwas anspringen könnte.</p><p>Aber der Rest war dann für die "menschliche Firewall" leicht zu regeln.</p><p>Hier habe ich mal unabhängig von Spam ein paar fragwürdige "Weisheiten" zusammengestellt, die man sich so über die Sicherheit im Internet so erzählt.</p><p><a href="https://dd3ah.de/cyber-mythen/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">dd3ah.de/cyber-mythen/</span><span class="invisible"></span></a></p>
🆘Bill Cole 🇺🇦<p>They (or an intentional DDoS) have been pounding the <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> RuleQA site into catatonia. They construct URLs which are legitimate and which each cause the site to go digging for the specific performance of a rule on an arbitrary date in the past. Hundreds of rules tested daily for ~20 years. <a href="https://tldr.nettime.org/@tante/114698748278993833" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">tldr.nettime.org/@tante/114698</span><span class="invisible">748278993833</span></a></p>
🆘Bill Cole 🇺🇦<p>Also: anyone who feels like donating anti-DDoS services to the <a href="https://toad.social/tags/ASF" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ASF</span></a> <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> project could find interest from the PMC and sysadmin team... <a href="https://toad.social/@grumpybozo/114683478386406020" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">toad.social/@grumpybozo/114683</span><span class="invisible">478386406020</span></a></p>
🆘Bill Cole 🇺🇦<p>Last week we enabled PRs on our read-only GH <a href="https://toad.social/tags/ASF" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ASF</span></a> <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> repo so that people who are most comfortable using git rather than svn can easily contribute. </p><p>Today we got the first garbage PR, apparently created by some LLM. It includes deleting everything. </p><p>It will not be merged.</p><p>But if you are NOT a LLM and want to help with SA, you can now use Github to submit PRs. HOWEVER, I suggest that those doing so provide comprehensible explanations of your intended contributions.</p>
Bruce Heerssen<p>I finally got my first bit of legitimate spam (is that even a thing?) since installing SpamAssassin on my mail server. SpamAssissin did its job and correctly tagged the message as spam. </p><p>Honestly, when I first set up my mail server, I thought I'd get a lot more spam. Either I've been lucky, or my internet hygiene is pretty okay.</p><p><a href="https://darkmoon.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> <a href="https://darkmoon.social/tags/Spam" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Spam</span></a> <a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Postfix</span></a> <a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ServerAdmin</span></a></p>
Bruce Heerssen<p>Woohoo! I got spamassassin working. Now to wait for some more spam. I never thought that would be something I'd write. 😆 </p><p><a href="https://darkmoon.social/tags/ServerAdmin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ServerAdmin</span></a> <a href="https://darkmoon.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> <a href="https://darkmoon.social/tags/Spam" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Spam</span></a> <a href="https://darkmoon.social/tags/Postfix" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Postfix</span></a></p>
🆘Bill Cole 🇺🇦<p>Now coming from AWS Bahrain. <br>I guess they got tired of being whacked at a fast pace and hamfisted scale. </p><p>Anyway, the volume is much less now, so if you wanted to interact with the <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> RuleQA system as a sane human might, you now can. Probably. For now.</p>
🆘Bill Cole 🇺🇦<p>Gee, I hope no legitimate <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> users are trying to get to RuleQA from these places... </p><p>Prefix: 94.74.80.0/20<br>Prefix: 101.44.176.0/20<br>Prefix: 111.119.192.0/20 <br>Prefix: 159.138.96.0/20<br>Prefix: 166.108.192.0/20<br>Prefix: 188.239.32.0/20</p><p><a href="https://toad.social/tags/Huawei" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Huawei</span></a> <a href="https://toad.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>InfoSec</span></a> <a href="https://toad.social/tags/DDoS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DDoS</span></a></p>
🆘Bill Cole 🇺🇦<p>If you are having trouble getting the the <a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a> infra in recent days, thank AS136907 (Huawei) for hosting so many DDoS-bots asking rule-qa.cgi impossible questions</p><p>This may get me to do something evil in that script.... </p><p><a href="https://toad.social/tags/Sysadminnery" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Sysadminnery</span></a> <a href="https://toad.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>InfoSec</span></a></p>
Ryan Peters<p>Is it me or is BAYES for Spamassassin absolutely useless? It seems to tag spam as ham just as much as it tags ham as spam. </p><p>I have it trained on thousands and thousands of spam/ham emails, too. No difference. </p><p><a href="https://social.binarydad.com/tags/spamassassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>spamassassin</span></a> <a href="https://social.binarydad.com/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>email</span></a> <a href="https://social.binarydad.com/tags/selfhosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>selfhosted</span></a> <a href="https://social.binarydad.com/tags/spam" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>spam</span></a></p>
Rainer "friendica" Sokoll<p>Tagelange Schmerzen, das Ergebnis in 3 Zeilen:</p><pre><code>body HIDDEN_TEXT /&lt;div style=(3d)?"(?=.*\bcolor:\s*\#fff)(?=.*\bdisplay:\s*none)(?=.*\bopacity:).*&gt;.{1000,}?&lt;\/div&gt;/si describe HIDDEN_TEXT invisible nonsense in a div container to confuse spam scanner score HIDDEN_TEXT 7</code></pre><p><a href="https://friendica.sokoll.com/search?tag=Spamassassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Spamassassin</span></a></p>
Grant Slater<p>If you're using <a href="https://en.osm.town/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a>, now is a good time to stop relying on Validity's Realtime DNS Block Lists ("Validity Zone File Access"). Free-tier users are being threatened with severe usage limits unless they arrange a call with Validity's sales team. <a href="https://en.osm.town/tags/DNSBL" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DNSBL</span></a> <a href="https://en.osm.town/tags/email" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>email</span></a> <a href="https://en.osm.town/tags/BaitAndSwitch" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BaitAndSwitch</span></a> 📩 💔</p>
🆘Bill Cole 🇺🇦<p><span class="h-card" translate="no"><a href="https://mastodon.uy/@santiago" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>santiago</span></a></span> FWIW, the automated rescoring that we (the SA Project of <a href="https://toad.social/tags/TheASF" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>TheASF</span></a>) do for the default rule channel works on the assumption that the threshold is 5. If you reduce the threshold you should put in proactive work to improve (i.e. reduce) the scores of mail that you value. </p><p>E.g. I use a level of 4 &amp; I use the supplementary KAM rules channel. I can only do that because the vast majority of the legit mail on my server is aimed at "more_spam_to" addresses.</p><p><a href="https://toad.social/tags/SpamAssassin" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SpamAssassin</span></a></p>