I need help understanding #SpamAssassin
I have a mail here that got scored with RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.408

Looking at https://github.com/apache/spamassassin/blob/d8b971c6432eba0ec1d5fcf89e61f3551b6446cd/rules/20_dnsbl_tests.cf#L159-L162 this seems to mean that Validity told me to fuck off (fair, I don't pay them), but why does that increase the score of the mail?
The score matches https://github.com/apache/spamassassin/blob/d8b971c6432eba0ec1d5fcf89e61f3551b6446cd/rulesrc/scores/72_scores.cf#L328 and I see no score for RCVD_IN_VALIDITY_CERTIFIED there.
There is a 0 score in https://github.com/apache/spamassassin/blob/d8b971c6432eba0ec1d5fcf89e61f3551b6446cd/rules/50_scores.cf#L520 which implies that check should be disabled anyway?

spamassassin/rules/20_dnsbl_tests.cf at d8b971c6432eba0ec1d5fcf89e61f3551b6446cd · apache/spamassassin

Read-only mirror of Apache SpamAssassin. Contribute to apache/spamassassin development by creating an account on GitHub.

GitHub

🚀 Deploy #Virtualmin on #AlmaLinux #VPS (5 Minute Quick-Start Guide)

This article provides a how-to guide to deploy Virtualmin on AlmaLinux VPS.
What is Virtualmin?
Virtualmin is a powerful open-source web hosting control panel built on top of Webmin.

It supports:

Multi-domain virtual hosting
Apache or Nginx
PHP ...
Continued 👉 https://blog.radwebhosting.com/deploy-virtualmin-on-almalinux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #dovecot #bind #clamav #controlpanel #selfhosting #mariadb #selfhosted #certbot #phpfpm #letsencrypt #spamassassin #postfix

🚀 Deploy #Virtualmin on #AlmaLinux #VPS (5 Minute Quick-Start Guide)

This article provides a how-to guide to deploy Virtualmin on AlmaLinux VPS.
What is Virtualmin?
Virtualmin is a powerful open-source web hosting control panel built on top of Webmin.

It supports:

Multi-domain virtual hosting
Apache or Nginx
PHP ...
Continued 👉 https://blog.radwebhosting.com/deploy-virtualmin-on-almalinux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #bind #controlpanel #phpfpm #letsencrypt #postfix #mariadb #certbot #clamav #spamassassin #dovecot #selfhosted #selfhosting

I guess it's time for me to finally get around to setting up #SpamAssassin on my #Email server. A while ago I had set up auto rejecting of emails that didn't meet basic levels of authentication and grey listing and that seemed to take care of any #Spam I had been getting for a bit, but now I'm getting a handful a day that are making it through. Seems the more sophisticated spammers have discovered me.

🚀 Deploy #Virtualmin on #AlmaLinux #VPS (5 Minute Quick-Start Guide)

This article provides a how-to guide to deploy Virtualmin on AlmaLinux VPS.
What is Virtualmin?
Virtualmin is a powerful open-source web hosting control panel built on top of Webmin.

It supports:

Multi-domain virtual hosting
Apache or Nginx
PHP ...
Continued 👉 https://blog.radwebhosting.com/deploy-virtualmin-on-almalinux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #phpfpm #postfix #dovecot #spamassassin #selfhosting #certbot #clamav #controlpanel #selfhosted #letsencrypt #mariadb #bind

I'm getting the same spam over and over to a self hosted account. The subject is always the same, the body is pretty short and nearly identical. The only thing that changes are the sending address and the parameters on a long URL at the end of the email.

No matter how many I pass to spamassassin it still never scores more than 3.7

Any ideas?

Subject: "Let's start getting to know each other."

#email #spam #spamassassin

Toiling in the #SpamAssassin dungeons today...
It's ridiculous how many bots are still hitting our RuleQA, mostly with referrer-free “detail” URLs, which I made trivial to answer (403) many months ago. Not enough to be a problem, just about 1k-hits per hour. Spread all around the net: latest 1000 hits came from 967 different IPs with 2 IPs accounting for all ofthe repeat visitors. 959 different /24s, 958 different /16s.
Asking for random info from many different years.
#InfoSec
If you’re in LACNIC-allocated space and can’t get to the #SpamAssassin infra, blame your immediate network neighbors. The DDoS’er who has been trying to destroy our RuleQA seems to be preferring that space. I've been blocking mostly by /22 as that's how much of the space is split up.
I know it's whack-a-mole, but I have no better approach. The attack is blended: SYN flood with those that get answered asking for high-cost URLs.
#InfoSec

I'm still at ~20% of TLSv1.3 for SMTP connections to deliver me mail with ~80% still being TLSv1.2.

However, for non-spam mail delivery it's 92% TLSv1.3 and 8% TLSv1.2.

Perhaps disabling TLSv1.2 is a good replacement of #rspamd or #spamassassin ? :)

🚀 Deploy #Virtualmin on #AlmaLinux #VPS (5 Minute Quick-Start Guide)

This article provides a how-to guide to deploy Virtualmin on AlmaLinux VPS.
What is Virtualmin?
Virtualmin is a powerful open-source web hosting control panel built on top of Webmin.

It supports:

Multi-domain virtual hosting
Apache or Nginx
PHP ...
Continued 👉 https://blog.radwebhosting.com/deploy-virtualmin-on-almalinux-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #letsencrypt #certbot #mariadb #selfhosted #bind #clamav #spamassassin #phpfpm #controlpanel #dovecot #postfix #selfhosting