Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
From: David Jones <djones@ena.com>
To: "users@spamassassin.apache.org" <users@spamassassin.apache.org>
Subject: Re: List of legit mass mailers
Thread-Topic: List of legit mass mailers
Thread-Index: AQHSl1C6/WwpywY3hk67QFr/PyoRO6GJ5xyAgAAJZj8=
Date: Tue, 7 Mar 2017 22:59:44 +0000
Message-ID: <BN6PR02MB2675BCF7300006247ECB1858C62F0@BN6PR02MB2675.namprd02.prod.outlook.com>
References: <58BDA8FA.3050902@junkemailfilter.com>
 <CAC+0R-pLLMbosihgSEZvkjS43mO+pai+6qH+44s60q=m6JY8yw@mail.gmail.com>,<55e86493-c48f-1003-4e27-db1995331a2a@meetinghouse.net>
In-Reply-To: <55e86493-c48f-1003-4e27-db1995331a2a@meetinghouse.net>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [76.187.196.227]
x-ms-office365-filtering-correlation-id: f2f7d9ee-808c-47e7-fba0-08d465ada593
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR02MB2675;
x-microsoft-exchange-diagnostics: 1;BN6PR02MB2675;7:8SYYb5nP4KRVC4gRewGZSrqWW3idsz+eFHnp7bibAeY12xLqhwubgq1CoW/KQssXE733zcewWZ4oMp93IAaA4USqbB2TKT3eUupwspfftWyXjxDEpidYyBSoQ6KUo1/79ndfPi60b4wbfSM7MqZ41nk6wsdF2JWz6+6MR+rRSAa9MWlN18MNCC4LpZzueXkzQUzUVLPXTOcUAmJ2z39wZTeURrqF+Xy3l4F3G1Pa8AEbpg0BXmIwNqnuOTfcJj+iiIv3EVPecwN76cNywUDxfQpee33RT0FxDJ2RaWQmlh1kf95KEDu0BxcDZK0ClgLuB7/o+adCX6gf5sfvw1I38g==
x-microsoft-antispam-prvs: <BN6PR02MB26755909A13C7CD68A909930C62F0@BN6PR02MB2675.namprd02.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(55715876382637)(252895345309445);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(6040375)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6041248)(20161123564025)(20161123555025)(20161123560025)(20161123558025)(20161123562025)(6072148);SRVR:BN6PR02MB2675;BCL:0;PCL:0;RULEID:;SRVR:BN6PR02MB2675;
x-forefront-prvs: 0239D46DB6
x-forefront-antispam-report: SFV:NSPM;SFS:(10009020)(6009001)(39450400003)(377454003)(54356999)(5640700003)(6436002)(25786008)(7736002)(55016002)(50986999)(76176999)(9686003)(66066001)(6506006)(305945005)(77096006)(86362001)(229853002)(81166006)(8676002)(8936002)(99286003)(3280700002)(3660700001)(2351001)(1730700003)(74316002)(6116002)(102836003)(3846002)(2900100001)(2950100002)(6916009)(106116001)(122556002)(53936002)(7696004)(6246003)(110136004)(33656002)(38730400002)(189998001)(5660300001)(2906002)(2501003);DIR:OUT;SFP:1101;SCL:1;SRVR:BN6PR02MB2675;H:BN6PR02MB2675.namprd02.prod.outlook.com;FPR:;SPF:None;MLV:sfv;LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: ena.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Mar 2017 22:59:44.5016
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 6dc38cd4-4d4f-4826-9649-17854289d170
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR02MB2675
X-ENA-MailScanner-Information: Please contact support@ena.com for more information
X-ENA-MailScanner-ID: 2AE981480CE0.A413C
X-ENA-MailScanner: No viruses found
X-ENA-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
	score=-4.501, required 4, BAYES_00 -1.90, DKIM_SIGNED 0.10,
	DKIM_VALID -0.10, DMARC_PASS -0.00, OS_WINDOWS 0.00,
	OS_WINDOWS7 0.00, RCVD_IN_DNSWL_NONE -0.20, RCVD_IN_MSPIKE_H2 -1.20,
	RCVD_IN_SENDERSCORE_80_89 -1.20, SPF_HELO_PASS -0.00,
	SPF_PASS -0.00)
X-ENA-MailScanner-From: djones@ena.com
X-ENA-MailScanner-Watermark: 1489532387.24008@kxQSuHatcWNfNbqwHbBM1Q
archived-at: Tue, 07 Mar 2017 23:00:00 -0000

>From: Miles Fidelman <mfidelman@meetinghouse.net>
>Sent: Tuesday, March 7, 2017 3:36 PM
>To: users@spamassassin.apache.org
>Subject: Re: List of legit mass mailers
=A0=20
>One might opine that there can be no such thing.=A0 Mass mailings are almo=
st always
>spam - except when distributed by an organization to its own customers or =
members.=A0

I don't want to start a huge debate over the definition of spam but there i=
s a distinct
difference between spam and UCE primarily due to how it should be handled. =
 If your
SA environment is only filtering a single or a few mailboxes, you can get a=
way with
treating spam and UCE the same so I am not talking about small SA instances=
.  In a
large SA instance of more than a few hundred mailboxes spam and UCE should =
be
handled differently.
Spam =3D malicious email intended to trick the recipient into do something =
bad.  This
includes viruses, malware, phishing, Nigerian scams, British lotteries, etc=
.
UCE =3D unsolicited commercial email.   This can be something the recipient=
 did
(possibly accidentally) or didn't sign up for.  UCE can come from trustwort=
hy senders
which can be safelisted with whitelist_auth.

I think what we are trying to target is the trustworthy commercial senders =
like
paypal.com, ebay.com which are in the def_whitelist_from_dkim and
def_whitelist_spf and work well in SA with shortcircuiting enabled.

I have extended my list of SA whitelist_* entries to about 4,000 and it is =
working
very well.  I let trusted senders with valid opt-out processing through to =
the end
user so they can decide for themselves to unsubscribe or continue receiving=
 it.
The trick is finding the pattern of trusted sender characteristics which I =
think I
have.

Dave=