-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Content-ID: <alpine.LSU.2.21.1711202118012.13507@Telcontar.valinor> On Monday, 2017-11-20 at 17:57 -0000, Ianseeks wrote:

On Monday, 20 November 2017 17:55:39 GMT Ianseeks wrote:

...

Hi

I'm having an issue sending emails to Factory because although i've got everything set to using plain text, it gets rejected as an html email. If this email gets through then i've found out why - the <Rich Text> button is shown as pressed on in the composer window for new emails. I've turned it off but I cannot find out how to make it stick for the next email, I think I recollect this happening a few years ago but I might be wrong. Any ideas?

Regards

Ian

Oh great.. Now its labeled as Spam - at least it got through and the Reply to Mailing List <Rich Text> button is off by default

LOL! Who/what marked it Spam? It is not openSUSE mail servers, and it is not my provider. Maybe your provider, but I don't detect their headers. Maybe these:

X-OWM-Source-IP: 31.*.*.* (GB) X-OWM-Env-Sender: bing....@btinternet.com X-Junkmail-Premium-Raw: score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FROM, __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, __TO_NO_NAME, __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, NO_CTA_URI_FOUND, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, BODY_SIZE_2000_LESS, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

8 out of 50? That's not spam, if I read it correctly. But then it matches all those rules? - -- Cheers, Carlos E. R. (from openSUSE 42.2 x86_64 "Malachite" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAloTOYgACgkQtTMYHG2NR9W+pwCfTJ8elHYRKsKBEb/5Fp541o6W 1kIAoIJtZ9oxkL4MRp/HB0ic/G67kLCQ =LzKh -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote:

...

provider. Maybe your provider, but I don't detect their headers. Maybe these:

...

X-OWM-Source-IP: 31.*.*.* (GB) X-OWM-Env-Sender: bing....@btinternet.com X-Junkmail-Premium-Raw: score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FROM, __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, __TO_NO_NAME, __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, NO_CTA_URI_FOUND, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, BODY_SIZE_2000_LESS, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

Its the same provider i use to send emails to all lists so why no others get "spammed", i have no idea. I didn;t realise that your own provider tags sent emails as spam, i thought it was done on receipt of an email.

Spam scoring & tagging is often done at the recipient's MTA, but there's no reason it can't be done at other stages as email gets relayed between machines. There's obviously a trust issue (rogue senders could spoof the spam-scoring as well) so in most environments only the last hop counts, and that helps with lightweight/mobile clients too. I guess as BT is a large ISP with a variable community of users they may be testing "outbound" mail to try and prevent some abuses escaping their network and damaging their reputation? BT seems to have done this for a long while with your outbound postings, and you typically seem to score 8-10/50 when sending :) I expect your local/last-hop-inbound spam categorisers have changed a ruleset recently which is why your mail was marked as SPAM locally to you. You'll need to inspect the headers on the received message on your machine, as when your reply goes back out to the list and is received <everywhere else> then whatever is running <everywhere else> will have overwritten the X-Spam-.... tags locally (or been stripped en-route). For example, your mail tagged as "[SPAM]" sent back to the list only scored -2.5 for me, with a required of 5.0, scored by SpamAssassin. If you are doing Bayesian filtering, when was the last time you trained your local categoriser with recent ham, as well as spam? HTH, Daniel -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Op dinsdag 21 november 2017 13:12:28 CET schreef Ianseeks:

On Tuesday, 21 November 2017 10:29:52 GMT Daniel Morris wrote:

...

On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote:

...

...

provider. Maybe your provider, but I don't detect their headers. Maybe

these:

...

X-OWM-Source-IP: 31.*.*.* (GB) X-OWM-Env-Sender: bing....@btinternet.com X-Junkmail-Premium-Raw: score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FR OM,

__FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, __TO_NO_NAME, __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, NO_CTA_URI_FOUND, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, BODY_SIZE_2000_LESS, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

Its the same provider i use to send emails to all lists so why no others get "spammed", i have no idea. I didn;t realise that your own provider tags sent emails as spam, i thought it was done on receipt of an email.

Spam scoring & tagging is often done at the recipient's MTA, but there's no reason it can't be done at other stages as email gets relayed between machines. There's obviously a trust issue (rogue senders could spoof the spam-scoring as well) so in most environments only the last hop counts, and that helps with lightweight/mobile clients too.

I guess as BT is a large ISP with a variable community of users they may be testing "outbound" mail to try and prevent some abuses escaping their network and damaging their reputation?

BT seems to have done this for a long while with your outbound postings, and you typically seem to score 8-10/50 when sending :) I expect your local/last-hop-inbound spam categorisers have changed a ruleset recently which is why your mail was marked as SPAM locally to you. You'll need to inspect the headers on the received message on your machine, as when your reply goes back out to the list and is received <everywhere else> then whatever is running <everywhere else> will have overwritten the X-Spam-.... tags locally (or been stripped en-route).

For example, your mail tagged as "[SPAM]" sent back to the list only scored -2.5 for me, with a required of 5.0, scored by SpamAssassin.

If you are doing Bayesian filtering, when was the last time you trained your local categoriser with recent ham, as well as spam?

HTH,

Daniel

Cheers for the explanation. I don't do any filtering at all apart from using rules on incoming in kmail

After reading Daniel's explanation I remembered that my former ISP started outgoing mailfiltering for their customers. I had to turn it off in the settings of their webapp. It had two options, filter your @isp mail, filter all mail from your IP address, to post in MLs without issues. Not completely offtopic, i.e. kmail related: to see if there is a setting in ~/.config/kmail2rc, I grepped -i html on ~/.config/kmail2rc and found it to have ~1500 duplicate lines. -- Gertjan Lettink, a.k.a. Knurpht openSUSE Board Member openSUSE Forums Team -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Op dinsdag 21 november 2017 15:03:16 CET schreef Patrick Shanahan:

* Knurpht - Gertjan Lettink <knurpht@opensuse.org> [11-21-17 08:49]:

...

Op dinsdag 21 november 2017 13:12:28 CET schreef Ianseeks:

...

On Tuesday, 21 November 2017 10:29:52 GMT Daniel Morris wrote:

...

On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote:

...

...

provider. Maybe your provider, but I don't detect their headers. Maybe

these: > X-OWM-Source-IP: 31.*.*.* (GB) > X-OWM-Env-Sender: bing....@btinternet.com > X-Junkmail-Premium-Raw: > score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HA > S_FR > OM, > > __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, > __TO_NO_NAME, > __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, > INVALID_MSGID_NO_FQDN, > __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, > __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, > __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, > BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, > NO_CTA_URI_FOUND, > __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, > BODY_SIZE_2000_LESS, > __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

Its the same provider i use to send emails to all lists so why no others get "spammed", i have no idea. I didn;t realise that your own provider tags sent emails as spam, i thought it was done on receipt of an email.

Spam scoring & tagging is often done at the recipient's MTA, but there's no reason it can't be done at other stages as email gets relayed between machines. There's obviously a trust issue (rogue senders could spoof the spam-scoring as well) so in most environments only the last hop counts, and that helps with lightweight/mobile clients too.

I guess as BT is a large ISP with a variable community of users they may be testing "outbound" mail to try and prevent some abuses escaping their network and damaging their reputation?

BT seems to have done this for a long while with your outbound postings, and you typically seem to score 8-10/50 when sending :) I expect your local/last-hop-inbound spam categorisers have changed a ruleset recently which is why your mail was marked as SPAM locally to you. You'll need to inspect the headers on the received message on your machine, as when your reply goes back out to the list and is received <everywhere else> then whatever is running <everywhere else> will have overwritten the X-Spam-.... tags locally (or been stripped en-route).

For example, your mail tagged as "[SPAM]" sent back to the list only scored -2.5 for me, with a required of 5.0, scored by SpamAssassin.

If you are doing Bayesian filtering, when was the last time you trained your local categoriser with recent ham, as well as spam?

HTH,

Daniel

Cheers for the explanation. I don't do any filtering at all apart from using rules on incoming in kmail

After reading Daniel's explanation I remembered that my former ISP started outgoing mailfiltering for their customers. I had to turn it off in the settings of their webapp. It had two options, filter your @isp mail, filter all mail from your IP address, to post in MLs without issues.

Not completely offtopic, i.e. kmail related: to see if there is a setting in ~/.config/kmail2rc, I grepped -i html on ~/.config/kmail2rc and found it to have ~1500 duplicate lines.

wow ~1500 dup lines, mine has 223 lines complete

btw, in my config there is an html line for every kmail folder. might explain a little. Yup. saw that, but kmail seems to write to the file, but not remove folders that are no longer there. Will have to do some more digging.

-- Gertjan Lettink, a.k.a. Knurpht openSUSE Board Member openSUSE Forums Team -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

* Carlos E. R. <robin.listas@telefonica.net> [11-21-17 10:27]:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

El 2017-11-21 a las 09:03 -0500, Patrick Shanahan escribió:

...

* Knurpht - Gertjan Lettink <> [11-21-17 08:49]:

...

Op dinsdag 21 november 2017 13:12:28 CET schreef Ianseeks:

...

On Tuesday, 21 November 2017 10:29:52 GMT Daniel Morris wrote:

...

On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote:

...

>provider. Maybe your provider, but I don't detect their headers. Maybe > >these: >>X-OWM-Source-IP: 31.*.*.* (GB) >>X-OWM-Env-Sender: bing....@btinternet.com >>X-Junkmail-Premium-Raw: >>score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FR >>OM, >> >> __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, >> __TO_NO_NAME, >> __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, >> __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, >> __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, >> __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, >> BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, >> NO_CTA_URI_FOUND, >> __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, >> BODY_SIZE_2000_LESS, >> __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

Its the same provider i use to send emails to all lists so why no others get "spammed", i have no idea. I didn;t realise that your own provider tags sent emails as spam, i thought it was done on receipt of an email.

Spam scoring & tagging is often done at the recipient's MTA, but there's no reason it can't be done at other stages as email gets relayed between machines. There's obviously a trust issue (rogue senders could spoof the spam-scoring as well) so in most environments only the last hop counts, and that helps with lightweight/mobile clients too.

I guess as BT is a large ISP with a variable community of users they may be testing "outbound" mail to try and prevent some abuses escaping their network and damaging their reputation?

BT seems to have done this for a long while with your outbound postings, and you typically seem to score 8-10/50 when sending :) I expect your local/last-hop-inbound spam categorisers have changed a ruleset recently which is why your mail was marked as SPAM locally to you. You'll need to inspect the headers on the received message on your machine, as when your reply goes back out to the list and is received <everywhere else> then whatever is running <everywhere else> will have overwritten the X-Spam-.... tags locally (or been stripped en-route).

For example, your mail tagged as "[SPAM]" sent back to the list only scored -2.5 for me, with a required of 5.0, scored by SpamAssassin.

If you are doing Bayesian filtering, when was the last time you trained your local categoriser with recent ham, as well as spam?

HTH,

Daniel

Cheers for the explanation. I don't do any filtering at all apart from using rules on incoming in kmail

After reading Daniel's explanation I remembered that my former ISP started outgoing mailfiltering for their customers. I had to turn it off in the settings of their webapp. It had two options, filter your @isp mail, filter all mail from your IP address, to post in MLs without issues.

Not completely offtopic, i.e. kmail related: to see if there is a setting in ~/.config/kmail2rc, I grepped -i html on ~/.config/kmail2rc and found it to have ~1500 duplicate lines.

-- Gertjan Lettink, a.k.a. Knurpht

openSUSE Board Member openSUSE Forums Team -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

wow ~1500 dup lines, mine has 223 lines complete

btw, in my config there is an html line for every kmail folder. might explain a little.

You not trimming posts? LOL! :-))

- -- Cheers Carlos E. R.

(from openSUSE 42.2 x86_64 "Malachite" (Minas Tirith)) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2

iF4EAREIAAYFAloURagACgkQja8UbcUWM1zxcQD9E9Dm2qh9eiJqxemP7yhSNH7Y jd58JLBTd4b6EiHxdagA+gKeb97Ypbi45nLU19BthFi9i0YqhO03V7nkGQS72crh =Zd6w -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

no, respond in kind. seems even elected reps cannot be bothered. why should I :) -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri Registered Linux User #207535 @ http://linuxcounter.net Photos: http://wahoo.no-ip.org/piwigo paka @ IRCnet freenode -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Tuesday, 21 November 2017 13:47:49 GMT Knurpht - Gertjan Lettink wrote:

Op dinsdag 21 november 2017 13:12:28 CET schreef Ianseeks:

...

On Tuesday, 21 November 2017 10:29:52 GMT Daniel Morris wrote:

...

On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote:

...

...

provider. Maybe your provider, but I don't detect their headers. Maybe

these:

...

X-OWM-Source-IP: 31.*.*.* (GB) X-OWM-Env-Sender: bing....@btinternet.com X-Junkmail-Premium-Raw: score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FR OM,

__FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, __TO_NO_NAME, __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, NO_CTA_URI_FOUND, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, BODY_SIZE_2000_LESS, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

Its the same provider i use to send emails to all lists so why no others get "spammed", i have no idea. I didn;t realise that your own provider tags sent emails as spam, i thought it was done on receipt of an email.

Spam scoring & tagging is often done at the recipient's MTA, but there's no reason it can't be done at other stages as email gets relayed between machines. There's obviously a trust issue (rogue senders could spoof the spam-scoring as well) so in most environments only the last hop counts, and that helps with lightweight/mobile clients too.

I guess as BT is a large ISP with a variable community of users they may be testing "outbound" mail to try and prevent some abuses escaping their network and damaging their reputation?

BT seems to have done this for a long while with your outbound postings, and you typically seem to score 8-10/50 when sending :) I expect your local/last-hop-inbound spam categorisers have changed a ruleset recently which is why your mail was marked as SPAM locally to you. You'll need to inspect the headers on the received message on your machine, as when your reply goes back out to the list and is received <everywhere else> then whatever is running <everywhere else> will have overwritten the X-Spam-.... tags locally (or been stripped en-route).

For example, your mail tagged as "[SPAM]" sent back to the list only scored -2.5 for me, with a required of 5.0, scored by SpamAssassin.

If you are doing Bayesian filtering, when was the last time you trained your local categoriser with recent ham, as well as spam?

HTH,

Daniel

Cheers for the explanation. I don't do any filtering at all apart from using rules on incoming in kmail

After reading Daniel's explanation I remembered that my former ISP started outgoing mailfiltering for their customers. I had to turn it off in the settings of their webapp. It had two options, filter your @isp mail, filter all mail from your IP address, to post in MLs without issues.

Not completely offtopic, i.e. kmail related: to see if there is a setting in ~/.config/kmail2rc, I grepped -i html on ~/.config/kmail2rc and found it to have ~1500 duplicate lines.

I didn't get any duplicates but i did see this in the [Composer] section html-markup=true improve-plain-text-html-message=false Queries on Folders Section: Config details for 24 folders but i only have 8 folders (excluding the standard ones) I also have 2 config sections for the same folder [Folder-16] MailingListArchiveAddress=http://lists.opensuse.org/opensuse-factory/ MailingListEnabled=true MailingListFeatures=95 MailingListHandler=0 MailingListHelpAddress=mailto:opensuse-factory+help@opensuse.org MailingListId= MailingListOwnerAddress=mailto:opensuse-factory+owner@opensuse.org MailingListPostingAddress=mailto:opensuse-factory@opensuse.org MailingListSubscribeAddress=mailto:opensuse-factory+subscribe@opensuse.org MailingListUnsubscribeAddress=mailto:opensuse-factory+unsubscribe@opensuse.org PutRepliesInSameFolder=false UseDefaultIdentity=true HtmlLoadExternalOverride=false [Folder-25] MailingListArchiveAddress=http://lists.opensuse.org/opensuse-factory/ MailingListEnabled=true MailingListFeatures=95 MailingListHandler=0 MailingListHelpAddress=mailto:opensuse-factory+help@opensuse.org MailingListId= MailingListOwnerAddress=mailto:opensuse-factory+owner@opensuse.org MailingListPostingAddress=mailto:opensuse-factory@opensuse.org MailingListSubscribeAddress=mailto:opensuse-factory+subscribe@opensuse.org MailingListUnsubscribeAddress=mailto:opensuse-factory+unsubscribe@opensuse.org PutRepliesInSameFolder=false UseDefaultIdentity=true htmlLoadExternalOverride=false -- opensuse:tumbleweed:20171117 Qt: 5.9.2 KDE Frameworks: 5.40.0 KDE Plasma: 5.11.3 kwin 5.11.3 kmail2 5.6.3 akonadiserver 5.6.3 Kernel: 4.13.12-1-default Nouveau: 1.0.15_1.2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Tuesday, 21 November 2017 18:00:12 GMT Patrick Shanahan wrote:

* Ianseeks <bingmybong@btinternet.com> [11-21-17 12:46]:

...

On Tuesday, 21 November 2017 13:47:49 GMT Knurpht - Gertjan Lettink wrote:

...

Op dinsdag 21 november 2017 13:12:28 CET schreef Ianseeks:

...

On Tuesday, 21 November 2017 10:29:52 GMT Daniel Morris wrote:

...

On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote:

...

> provider. Maybe your provider, but I don't detect their headers. Maybe > > these: > > X-OWM-Source-IP: 31.*.*.* (GB) > > X-OWM-Env-Sender: bing....@btinternet.com > > X-Junkmail-Premium-Raw: > > score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FR > > OM, > > > > __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, > > __TO_NO_NAME, > > __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, > > __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, > > __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, > > __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, > > BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, > > NO_CTA_URI_FOUND, > > __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, > > BODY_SIZE_2000_LESS, > > __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

Its the same provider i use to send emails to all lists so why no others get "spammed", i have no idea. I didn;t realise that your own provider tags sent emails as spam, i thought it was done on receipt of an email.

Spam scoring & tagging is often done at the recipient's MTA, but there's no reason it can't be done at other stages as email gets relayed between machines. There's obviously a trust issue (rogue senders could spoof the spam-scoring as well) so in most environments only the last hop counts, and that helps with lightweight/mobile clients too.

I guess as BT is a large ISP with a variable community of users they may be testing "outbound" mail to try and prevent some abuses escaping their network and damaging their reputation?

BT seems to have done this for a long while with your outbound postings, and you typically seem to score 8-10/50 when sending :) I expect your local/last-hop-inbound spam categorisers have changed a ruleset recently which is why your mail was marked as SPAM locally to you. You'll need to inspect the headers on the received message on your machine, as when your reply goes back out to the list and is received <everywhere else> then whatever is running <everywhere else> will have overwritten the X-Spam-.... tags locally (or been stripped en-route).

For example, your mail tagged as "[SPAM]" sent back to the list only scored -2.5 for me, with a required of 5.0, scored by SpamAssassin.

If you are doing Bayesian filtering, when was the last time you trained your local categoriser with recent ham, as well as spam?

HTH,

Daniel

Cheers for the explanation. I don't do any filtering at all apart from using rules on incoming in kmail

After reading Daniel's explanation I remembered that my former ISP started outgoing mailfiltering for their customers. I had to turn it off in the settings of their webapp. It had two options, filter your @isp mail, filter all mail from your IP address, to post in MLs without issues.

Not completely offtopic, i.e. kmail related: to see if there is a setting in ~/.config/kmail2rc, I grepped -i html on ~/.config/kmail2rc and found it to have ~1500 duplicate lines.

I didn't get any duplicates but i did see this in the [Composer] section

html-markup=true improve-plain-text-html-message=false

Queries on Folders Section: Config details for 24 folders but i only have 8 folders (excluding the standard ones)

I also have 2 config sections for the same folder

[Folder-16] MailingListArchiveAddress=http://lists.opensuse.org/opensuse-factory/ MailingListEnabled=true MailingListFeatures=95 MailingListHandler=0 MailingListHelpAddress=mailto:opensuse-factory+help@opensuse.org MailingListId= MailingListOwnerAddress=mailto:opensuse-factory+owner@opensuse.org MailingListPostingAddress=mailto:opensuse-factory@opensuse.org MailingListSubscribeAddress=mailto:opensuse-factory+subscribe@opensuse.org MailingListUnsubscribeAddress=mailto:opensuse-factory+unsubscribe@opensuse.org PutRepliesInSameFolder=false UseDefaultIdentity=true HtmlLoadExternalOverride=false

[Folder-25] MailingListArchiveAddress=http://lists.opensuse.org/opensuse-factory/ MailingListEnabled=true MailingListFeatures=95 MailingListHandler=0 MailingListHelpAddress=mailto:opensuse-factory+help@opensuse.org MailingListId= MailingListOwnerAddress=mailto:opensuse-factory+owner@opensuse.org MailingListPostingAddress=mailto:opensuse-factory@opensuse.org MailingListSubscribeAddress=mailto:opensuse-factory+subscribe@opensuse.org MailingListUnsubscribeAddress=mailto:opensuse-factory+unsubscribe@opensuse.org PutRepliesInSameFolder=false UseDefaultIdentity=true htmlLoadExternalOverride=false

maybe you might change the line: html-markup=true

That was my thought too but i wasn't sure if thats a safe thing to do. -- opensuse:tumbleweed:20171117 Qt: 5.9.2 KDE Frameworks: 5.40.0 KDE Plasma: 5.11.3 kwin 5.11.3 kmail2 5.6.3 akonadiserver 5.6.3 Kernel: 4.13.12-1-default Nouveau: 1.0.15_1.2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Wednesday, 22 November 2017 13:07:10 GMT Patrick Shanahan wrote:

* Ianseeks <bingmybong@btinternet.com> [11-22-17 04:19]:

...

On Tuesday, 21 November 2017 18:00:12 GMT Patrick Shanahan wrote:

...

* Ianseeks <bingmybong@btinternet.com> [11-21-17 12:46]:

...

On Tuesday, 21 November 2017 13:47:49 GMT Knurpht - Gertjan Lettink wrote:

...

Op dinsdag 21 november 2017 13:12:28 CET schreef Ianseeks:

...

On Tuesday, 21 November 2017 10:29:52 GMT Daniel Morris wrote: > On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote: > > > provider. Maybe your provider, but I don't detect their headers. Maybe > > > > > > these: > > > > X-OWM-Source-IP: 31.*.*.* (GB) > > > > X-OWM-Env-Sender: bing....@btinternet.com > > > > X-Junkmail-Premium-Raw: > > > > score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FR > > > > OM, > > > > > > > > __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, > > > > __TO_NO_NAME, > > > > __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, > > > > __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, > > > > __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, > > > > __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, > > > > BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, > > > > NO_CTA_URI_FOUND, > > > > __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, > > > > BODY_SIZE_2000_LESS, > > > > __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS > > > > Its the same provider i use to send emails to all lists so why no > > others get "spammed", i have no idea. I didn;t realise that your own > > provider tags sent emails as spam, i thought it was done on receipt of > > an email. > > Spam scoring & tagging is often done at the recipient's MTA, but there's > no reason it can't be done at other stages as email gets relayed between > machines. There's obviously a trust issue (rogue senders could spoof the > spam-scoring as well) so in most environments only the last hop counts, > and that helps with lightweight/mobile clients too. > > I guess as BT is a large ISP with a variable community of users they may > be testing "outbound" mail to try and prevent some abuses escaping their > network and damaging their reputation? > > BT seems to have done this for a long while with your outbound postings, > and you typically seem to score 8-10/50 when sending :) I expect your > local/last-hop-inbound spam categorisers have changed a ruleset recently > which is why your mail was marked as SPAM locally to you. You'll need to > inspect the headers on the received message on your machine, as when > your reply goes back out to the list and is received <everywhere else> > then whatever is running <everywhere else> will have overwritten the > X-Spam-.... tags locally (or been stripped en-route). > > For example, your mail tagged as "[SPAM]" sent back to the list only > scored -2.5 for me, with a required of 5.0, scored by SpamAssassin. > > If you are doing Bayesian filtering, when was the last time you trained > your local categoriser with recent ham, as well as spam? > > HTH, > > Daniel

Cheers for the explanation. I don't do any filtering at all apart from using rules on incoming in kmail

After reading Daniel's explanation I remembered that my former ISP started outgoing mailfiltering for their customers. I had to turn it off in the settings of their webapp. It had two options, filter your @isp mail, filter all mail from your IP address, to post in MLs without issues.

Not completely offtopic, i.e. kmail related: to see if there is a setting in ~/.config/kmail2rc, I grepped -i html on ~/.config/kmail2rc and found it to have ~1500 duplicate lines.

I didn't get any duplicates but i did see this in the [Composer] section

html-markup=true improve-plain-text-html-message=false

Queries on Folders Section: Config details for 24 folders but i only have 8 folders (excluding the standard ones)

I also have 2 config sections for the same folder

[Folder-16] MailingListArchiveAddress=http://lists.opensuse.org/opensuse-factory/ MailingListEnabled=true MailingListFeatures=95 MailingListHandler=0 MailingListHelpAddress=mailto:opensuse-factory+help@opensuse.org MailingListId= MailingListOwnerAddress=mailto:opensuse-factory+owner@opensuse.org MailingListPostingAddress=mailto:opensuse-factory@opensuse.org MailingListSubscribeAddress=mailto:opensuse-factory+subscribe@opensuse.org MailingListUnsubscribeAddress=mailto:opensuse-factory+unsubscribe@opensuse.org PutRepliesInSameFolder=false UseDefaultIdentity=true HtmlLoadExternalOverride=false

[Folder-25] MailingListArchiveAddress=http://lists.opensuse.org/opensuse-factory/ MailingListEnabled=true MailingListFeatures=95 MailingListHandler=0 MailingListHelpAddress=mailto:opensuse-factory+help@opensuse.org MailingListId= MailingListOwnerAddress=mailto:opensuse-factory+owner@opensuse.org MailingListPostingAddress=mailto:opensuse-factory@opensuse.org MailingListSubscribeAddress=mailto:opensuse-factory+subscribe@opensuse.org MailingListUnsubscribeAddress=mailto:opensuse-factory+unsubscribe@opensuse.org PutRepliesInSameFolder=false UseDefaultIdentity=true htmlLoadExternalOverride=false

maybe you might change the line: html-markup=true

That was my thought too but i wasn't sure if thats a safe thing to do.

you cannot remember that particular, small change in order to change it back if it fails?

I can just remember to press the [Rich Text] button before i send to Factory, other lists don;t seem bothered by it.

-- opensuse:tumbleweed:20171120 Qt: 5.9.2 KDE Frameworks: 5.40.0 KDE Plasma: 5.11.3 kwin 5.11.3 kmail2 5.6.3 akonadiserver 5.6.3 Kernel: 4.13.12-1-default Nouveau: 1.0.15_1.2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Wednesday, 22 November 2017 16:28:20 GMT Patrick Shanahan wrote:

* Ianseeks <bingmybong@btinternet.com> [11-22-17 11:07]:

...

On Wednesday, 22 November 2017 13:07:10 GMT Patrick Shanahan wrote:

...

* Ianseeks <bingmybong@btinternet.com> [11-22-17 04:19]:

...

On Tuesday, 21 November 2017 18:00:12 GMT Patrick Shanahan wrote:

...

* Ianseeks <bingmybong@btinternet.com> [11-21-17 12:46]:

...

On Tuesday, 21 November 2017 13:47:49 GMT Knurpht - Gertjan Lettink wrote: > Op dinsdag 21 november 2017 13:12:28 CET schreef Ianseeks: > > On Tuesday, 21 November 2017 10:29:52 GMT Daniel Morris wrote: > > > On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote: > > > > > provider. Maybe your provider, but I don't detect their headers. Maybe > > > > > > > > > > these: > > > > > > X-OWM-Source-IP: 31.*.*.* (GB) > > > > > > X-OWM-Env-Sender: bing....@btinternet.com > > > > > > X-Junkmail-Premium-Raw: > > > > > > score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FR > > > > > > OM, > > > > > > > > > > > > __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, > > > > > > __TO_NO_NAME, > > > > > > __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, > > > > > > __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, > > > > > > __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, > > > > > > __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, > > > > > > BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, > > > > > > NO_CTA_URI_FOUND, > > > > > > __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, > > > > > > BODY_SIZE_2000_LESS, > > > > > > __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS > > > > > > > > Its the same provider i use to send emails to all lists so why no > > > > others get "spammed", i have no idea. I didn;t realise that your own > > > > provider tags sent emails as spam, i thought it was done on receipt of > > > > an email. > > > > > > Spam scoring & tagging is often done at the recipient's MTA, but there's > > > no reason it can't be done at other stages as email gets relayed between > > > machines. There's obviously a trust issue (rogue senders could spoof the > > > spam-scoring as well) so in most environments only the last hop counts, > > > and that helps with lightweight/mobile clients too. > > > > > > I guess as BT is a large ISP with a variable community of users they may > > > be testing "outbound" mail to try and prevent some abuses escaping their > > > network and damaging their reputation? > > > > > > BT seems to have done this for a long while with your outbound postings, > > > and you typically seem to score 8-10/50 when sending :) I expect your > > > local/last-hop-inbound spam categorisers have changed a ruleset recently > > > which is why your mail was marked as SPAM locally to you. You'll need to > > > inspect the headers on the received message on your machine, as when > > > your reply goes back out to the list and is received <everywhere else> > > > then whatever is running <everywhere else> will have overwritten the > > > X-Spam-.... tags locally (or been stripped en-route). > > > > > > For example, your mail tagged as "[SPAM]" sent back to the list only > > > scored -2.5 for me, with a required of 5.0, scored by SpamAssassin. > > > > > > If you are doing Bayesian filtering, when was the last time you trained > > > your local categoriser with recent ham, as well as spam? > > > > > > HTH, > > > > > > Daniel > > > > Cheers for the explanation. I don't do any filtering at all apart from using > > rules on incoming in kmail > > After reading Daniel's explanation I remembered that my former ISP started > outgoing mailfiltering for their customers. I had to turn it off in the > settings of their webapp. It had two options, filter your @isp mail, filter > all mail from your IP address, to post in MLs without issues. > > Not completely offtopic, i.e. kmail related: to see if there is a setting in > ~/.config/kmail2rc, I grepped -i html on ~/.config/kmail2rc and found it to > have ~1500 duplicate lines. > >

I didn't get any duplicates but i did see this in the [Composer] section

html-markup=true improve-plain-text-html-message=false

Queries on Folders Section: Config details for 24 folders but i only have 8 folders (excluding the standard ones)

I also have 2 config sections for the same folder

[Folder-16] MailingListArchiveAddress=http://lists.opensuse.org/opensuse-factory/ MailingListEnabled=true MailingListFeatures=95 MailingListHandler=0 MailingListHelpAddress=mailto:opensuse-factory+help@opensuse.org MailingListId= MailingListOwnerAddress=mailto:opensuse-factory+owner@opensuse.org MailingListPostingAddress=mailto:opensuse-factory@opensuse.org MailingListSubscribeAddress=mailto:opensuse-factory+subscribe@opensuse.org MailingListUnsubscribeAddress=mailto:opensuse-factory+unsubscribe@opensuse.org PutRepliesInSameFolder=false UseDefaultIdentity=true HtmlLoadExternalOverride=false

[Folder-25] MailingListArchiveAddress=http://lists.opensuse.org/opensuse-factory/ MailingListEnabled=true MailingListFeatures=95 MailingListHandler=0 MailingListHelpAddress=mailto:opensuse-factory+help@opensuse.org MailingListId= MailingListOwnerAddress=mailto:opensuse-factory+owner@opensuse.org MailingListPostingAddress=mailto:opensuse-factory@opensuse.org MailingListSubscribeAddress=mailto:opensuse-factory+subscribe@opensuse.org MailingListUnsubscribeAddress=mailto:opensuse-factory+unsubscribe@opensuse.org PutRepliesInSameFolder=false UseDefaultIdentity=true htmlLoadExternalOverride=false

maybe you might change the line: html-markup=true

That was my thought too but i wasn't sure if thats a safe thing to do.

you cannot remember that particular, small change in order to change it back if it fails?

I can just remember to press the [Rich Text] button before i send to Factory, other lists don;t seem bothered by it.

...

instead of trying to effect a solution ????

There is already a bug report about it on the kdepim-users list https://bugs.kde.org/386660. -- opensuse:tumbleweed:20171121 Qt: 5.9.2 KDE Frameworks: 5.40.0 KDE Plasma: 5.11.3 kwin 5.11.3 kmail2 5.6.3 akonadiserver 5.6.3 Kernel: 4.14.0-1-default Nouveau: 1.0.15_1.2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Monday, 20 November 2017 20:56:58 GMT Knurpht - Gertjan Lettink wrote:

Op maandag 20 november 2017 18:55:39 CET schreef Ianseeks:

...

Hi

I'm having an issue sending emails to Factory because although i've got everything set to using plain text, it gets rejected as an html email. If this email gets through then i've found out why - the <Rich Text> button is shown as pressed on in the composer window for new emails. I've turned it off but I cannot find out how to make it stick for the next email, I think I recollect this happening a few years ago but I might be wrong. Any ideas?

Regards

Ian

You mean the "T" icon? It's on in my case, testing now if this is what it's about. It shows as active ( pressed ).

Yes, thats the one. Factory list objects to these type emails. Its only happened within the last few snapshots or so as i've not sent an email to Factory for a while. I've also had a reply issue on another list where the reply would not include the text of the email i was replying to but it worked for this one -- opensuse:tumbleweed:20171117 Qt: 5.9.2 KDE Frameworks: 5.40.0 KDE Plasma: 5.11.3 kwin 5.11.3 kmail2 5.6.3 akonadiserver 5.6.3 Kernel: 4.13.12-1-default Nouveau: 1.0.15_1.2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Content-ID: <alpine.LSU.2.21.1711202118012.13507@Telcontar.valinor> On Monday, 2017-11-20 at 17:57 -0000, Ianseeks wrote:

On Monday, 20 November 2017 17:55:39 GMT Ianseeks wrote:

...

Hi

I'm having an issue sending emails to Factory because although i've got everything set to using plain text, it gets rejected as an html email. If this email gets through then i've found out why - the <Rich Text> button is shown as pressed on in the composer window for new emails. I've turned it off but I cannot find out how to make it stick for the next email, I think I recollect this happening a few years ago but I might be wrong. Any ideas?

Regards

Ian

Oh great.. Now its labeled as Spam - at least it got through and the Reply to Mailing List <Rich Text> button is off by default

LOL! Who/what marked it Spam? It is not openSUSE mail servers, and it is not my provider. Maybe your provider, but I don't detect their headers. Maybe these:

X-OWM-Source-IP: 31.*.*.* (GB) X-OWM-Env-Sender: bing....@btinternet.com X-Junkmail-Premium-Raw: score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FROM, __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, __TO_NO_NAME, __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, NO_CTA_URI_FOUND, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, BODY_SIZE_2000_LESS, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

8 out of 50? That's not spam, if I read it correctly. But then it matches all those rules? - -- Cheers, Carlos E. R. (from openSUSE 42.2 x86_64 "Malachite" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAloTOYgACgkQtTMYHG2NR9W+pwCfTJ8elHYRKsKBEb/5Fp541o6W 1kIAoIJtZ9oxkL4MRp/HB0ic/G67kLCQ =LzKh -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote:

...

provider. Maybe your provider, but I don't detect their headers. Maybe these:

...

X-OWM-Source-IP: 31.*.*.* (GB) X-OWM-Env-Sender: bing....@btinternet.com X-Junkmail-Premium-Raw: score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FROM, __FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, __TO_NO_NAME, __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, NO_CTA_URI_FOUND, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, BODY_SIZE_2000_LESS, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

Its the same provider i use to send emails to all lists so why no others get "spammed", i have no idea. I didn;t realise that your own provider tags sent emails as spam, i thought it was done on receipt of an email.

Spam scoring & tagging is often done at the recipient's MTA, but there's no reason it can't be done at other stages as email gets relayed between machines. There's obviously a trust issue (rogue senders could spoof the spam-scoring as well) so in most environments only the last hop counts, and that helps with lightweight/mobile clients too. I guess as BT is a large ISP with a variable community of users they may be testing "outbound" mail to try and prevent some abuses escaping their network and damaging their reputation? BT seems to have done this for a long while with your outbound postings, and you typically seem to score 8-10/50 when sending :) I expect your local/last-hop-inbound spam categorisers have changed a ruleset recently which is why your mail was marked as SPAM locally to you. You'll need to inspect the headers on the received message on your machine, as when your reply goes back out to the list and is received <everywhere else> then whatever is running <everywhere else> will have overwritten the X-Spam-.... tags locally (or been stripped en-route). For example, your mail tagged as "[SPAM]" sent back to the list only scored -2.5 for me, with a required of 5.0, scored by SpamAssassin. If you are doing Bayesian filtering, when was the last time you trained your local categoriser with recent ham, as well as spam? HTH, Daniel -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Op dinsdag 21 november 2017 13:12:28 CET schreef Ianseeks:

On Tuesday, 21 November 2017 10:29:52 GMT Daniel Morris wrote:

...

On Tue, Nov 21, 2017 at 09:18:30AM +0000, Ianseeks wrote:

...

...

provider. Maybe your provider, but I don't detect their headers. Maybe

these:

...

X-OWM-Source-IP: 31.*.*.* (GB) X-OWM-Env-Sender: bing....@btinternet.com X-Junkmail-Premium-Raw: score=8/50,refid=2.7.2:2017.11.20.172117:17:8.317,ip=,rules=__HAS_FR OM,

__FRAUD_WEBMAIL_FROM, FROM_NAME_ONE_WORD, __TO_MALFORMED_2, __TO_NO_NAME, __SUBJ_ALPHA_END, __HAS_MSGID, __SANE_MSGID, INVALID_MSGID_NO_FQDN, __MIME_VERSION, __CTE, __CT, __CT_TEXT_PLAIN, SUPERLONG_LINE, __NO_HTML_TAG_RAW, BODY_SIZE_600_699, BODYTEXTP_SIZE_3000_LESS, __MIME_TEXT_P1, __MIME_TEXT_ONLY, HTML_00_01, HTML_00_10, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL, NO_URI_FOUND, NO_CTA_URI_FOUND, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_1000_LESS, BODY_SIZE_2000_LESS, __MIME_TEXT_P, NO_URI_HTTPS, BODY_SIZE_7000_LESS

Its the same provider i use to send emails to all lists so why no others get "spammed", i have no idea. I didn;t realise that your own provider tags sent emails as spam, i thought it was done on receipt of an email.

Spam scoring & tagging is often done at the recipient's MTA, but there's no reason it can't be done at other stages as email gets relayed between machines. There's obviously a trust issue (rogue senders could spoof the spam-scoring as well) so in most environments only the last hop counts, and that helps with lightweight/mobile clients too.

I guess as BT is a large ISP with a variable community of users they may be testing "outbound" mail to try and prevent some abuses escaping their network and damaging their reputation?

BT seems to have done this for a long while with your outbound postings, and you typically seem to score 8-10/50 when sending :) I expect your local/last-hop-inbound spam categorisers have changed a ruleset recently which is why your mail was marked as SPAM locally to you. You'll need to inspect the headers on the received message on your machine, as when your reply goes back out to the list and is received <everywhere else> then whatever is running <everywhere else> will have overwritten the X-Spam-.... tags locally (or been stripped en-route).

For example, your mail tagged as "[SPAM]" sent back to the list only scored -2.5 for me, with a required of 5.0, scored by SpamAssassin.

If you are doing Bayesian filtering, when was the last time you trained your local categoriser with recent ham, as well as spam?

HTH,

Daniel

Cheers for the explanation. I don't do any filtering at all apart from using rules on incoming in kmail

After reading Daniel's explanation I remembered that my former ISP started outgoing mailfiltering for their customers. I had to turn it off in the settings of their webapp. It had two options, filter your @isp mail, filter all mail from your IP address, to post in MLs without issues. Not completely offtopic, i.e. kmail related: to see if there is a setting in ~/.config/kmail2rc, I grepped -i html on ~/.config/kmail2rc and found it to have ~1500 duplicate lines. -- Gertjan Lettink, a.k.a. Knurpht openSUSE Board Member openSUSE Forums Team -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org