lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:	Mon, 31 Oct 2011 09:34:28 -0400
From:	Michael Alan Dorman <mdorman@...nicdesign.com>
To:	postmaster@...r.kernel.org
Cc:	linux-kernel@...r.kernel.org
Subject: Would it be possible to turn off RFC822TABS in vger's zmailer config?

Hi, Dave, Matti,

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6429 has the
details regarding the investigation in the SpamAssassin dev community
that suggests that vger may be the only legitimate source of email that
uses tabs in its headers---it is otherwise a very likely sign of a spam
email.

Although as you can see from the bug report's resolution, a modification
has been done to the rule that matches to try and work around this---and
thereby not unduly penalize mailing lists hosted on vger---it seems an
even better solution would be if you were to actually change the zmailer
configuration to not modify the headers of the emails passing through
it.

I don't know much about zmailer or your majordomo setup, but it seems
like this would be a simple change that could make it easier for the
many people on vger's lists who probably use SpamAssassin to keep their
inboxes clean without undue false positives.

Thanks for your time,

Mike.
<Not really a representative of the SA devs>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ