Bug 7902

Summary:	remove *@google.com from def_welcomelist_auth
Product:	Spamassassin	Reporter:	Matus UHLAR - fantomas <uhlar>
Component:	Rules	Assignee:	SpamAssassin Developer Mailing List <dev>
Status:	REOPENED ---
Severity:	normal	CC:	apache, giovanni, kmcgrail, me, uhlar
Priority:	P2
Version:	unspecified
Target Milestone:	Undefined
Hardware:	PC
OS:	Linux
Whiteboard:
Attachments:	Add to welcomelist only some trusted Google email addresses

Description Matus UHLAR - fantomas 2021-05-03 10:39:24 UTC

I am receiving spam mail from google.com, generated by google drive.

From: "ariya ariya (via Google Drive)" <drive-shares-noreply@google.com>
From: "Linda marry (via Google Drive)" <drive-shares-noreply@google.com>
From: "Sarah Babe (via Google Docs)" <drive-shares-noreply@google.com>
From: "Hannah lips (via Google Docs)" <drive-shares-noreply@google.com>
From: "deniela jeni (via Google Docs)" <drive-shares-noreply@google.com>

the domain is whitelisted by default:

60_whitelist_auth.cf:def_welcomelist_auth *@google.com
60_whitelist_auth.cf:def_whitelist_auth *@google.com

I recommend taking this domain off default whitelist until google fixes sending address for these mails (they should be clients/gmail addresses, not @google.com)

... or, until we're able to reverse this by exclusion by e.g.

def_blocklist_from email@address

Comment 1 Matus UHLAR - fantomas 2021-05-03 10:44:16 UTC

this has been discussed in spamassassin-users list

https://mail-archives.apache.org/mod_mbox/spamassassin-users/202104.mbox/<20210404105408.GD5160%40fantomas.sk>
https://mail-archives.apache.org/mod_mbox/spamassassin-users/202104.mbox/<20210404141933.2af0c2c0@gumby.homeunix.com>

Comment 2 Benny Pedersen 2021-05-03 17:23:15 UTC

perldoc Mail::SpamAssassin::Conf see unwhitelist_auth, it does def_ variants aswell

unwhitelist_auth drive-shares-noreply@* *

is hopefully correct syntax

last star is important, i have no time to verify it works or not

alternative change score for def_whitelist_auth

Comment 3 Henrik Krohns 2022-04-03 05:11:45 UTC

Closing stale bug, don't think it's an issue anymore.

Comment 4 Giovanni Bechis 2023-01-02 15:09:26 UTC

Created attachment 5872 [details]
Add to welcomelist only some trusted Google email addresses

Spam from Google continues, attached a proposed rule change to whitelist only some trusted Google email addresses.

Comment 5 Giovanni Bechis 2023-01-09 17:49:59 UTC

Spam from Google continues, attached a proposed rule change to whitelist only some trusted Google email addresses.

Comment 6 Kevin A. McGrail 2023-01-09 17:57:54 UTC

+1