Bug 7902 - remove *@google.com from def_welcomelist_auth
Summary: remove *@google.com from def_welcomelist_auth
Status: REOPENED
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: unspecified
Hardware: PC Linux
: P2 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-05-03 10:39 UTC by Matus UHLAR - fantomas
Modified: 2023-01-09 17:57 UTC (History)
5 users (show)


Attachment Type Modified Status Actions Submitter/CLA Status
Add to welcomelist only some trusted Google email addresses patch None Giovanni Bechis [HasCLA]
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matus UHLAR - fantomas 2021-05-03 10:39:24 UTC 
I am receiving spam mail from google.com, generated by google drive.

From: "ariya ariya (via Google Drive)" <drive-shares-noreply@google.com>
From: "Linda marry (via Google Drive)" <drive-shares-noreply@google.com>
From: "Sarah Babe (via Google Docs)" <drive-shares-noreply@google.com>
From: "Hannah lips (via Google Docs)" <drive-shares-noreply@google.com>
From: "deniela jeni (via Google Docs)" <drive-shares-noreply@google.com>

the domain is whitelisted by default:

60_whitelist_auth.cf:def_welcomelist_auth *@google.com
60_whitelist_auth.cf:def_whitelist_auth *@google.com

I recommend taking this domain off default whitelist until google fixes sending address for these mails (they should be clients/gmail addresses, not @google.com)

... or, until we're able to reverse this by exclusion by e.g.

def_blocklist_from email@address
Comment 1 Matus UHLAR - fantomas 2021-05-03 10:44:16 UTC 
this has been discussed in spamassassin-users list

https://mail-archives.apache.org/mod_mbox/spamassassin-users/202104.mbox/<20210404105408.GD5160%40fantomas.sk>
https://mail-archives.apache.org/mod_mbox/spamassassin-users/202104.mbox/<20210404141933.2af0c2c0@gumby.homeunix.com>
Comment 2 Benny Pedersen 2021-05-03 17:23:15 UTC 
perldoc Mail::SpamAssassin::Conf see unwhitelist_auth, it does def_ variants aswell

unwhitelist_auth drive-shares-noreply@* *

is hopefully correct syntax

last star is important, i have no time to verify it works or not

alternative change score for def_whitelist_auth
Comment 3 Henrik Krohns 2022-04-03 05:11:45 UTC 
Closing stale bug, don't think it's an issue anymore.
Comment 4 Giovanni Bechis 2023-01-02 15:09:26 UTC 
Created attachment 5872 [details]
Add to welcomelist only some trusted Google email addresses

Spam from Google continues, attached a proposed rule change to whitelist only some trusted Google email addresses.
Comment 5 Giovanni Bechis 2023-01-09 17:49:59 UTC 
Spam from Google continues, attached a proposed rule change to whitelist only some trusted Google email addresses.
Comment 6 Kevin A. McGrail 2023-01-09 17:57:54 UTC 
+1