Bug 7949 - SpamAssassin & .online domains
Summary: SpamAssassin & .online domains
Status: RESOLVED INVALID
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: spamassassin (show other bugs)
Version: unspecified
Hardware: PC Windows NT
: P2 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-12-16 20:53 UTC by multu14200
Modified: 2022-03-11 16:42 UTC (History)
2 users (show)



Attachment Type Modified Status Actions Submitter/CLA Status

Note You need to log in before you can comment on or make changes to this bug.
Description multu14200 2021-12-16 20:53:04 UTC
Hello! I don't know if this is the right place, but I see that your SpamAssassin filter gives my domain name a bad reputation. Here is what I could list:

-0.499	FROM_SUSPICIOUS_NTLD	From abused NTLD
-0.001	FROM_SUSPICIOUS_NTLD_FP	From abused NTLD
-0.249	HEADER_FROM_DIFFERENT_DOMAINS	From and EnvelopeFrom 2nd level mail domains are different
-0.001	MIME_QP_LONG_LINE	Quoted-printable line longer than 76 chars
-1.725	PDS_OTHER_BAD_TLD	Untrustworthy TLDs
URI: combien.online (online)

Do you know how to avoid this by keeping the same domain name so that I don't end up spamming my recipients?

Thank you in advance
Comment 1 Bill Cole 2021-12-16 23:12:08 UTC
(In reply to sikro94 from comment #0)
> Hello! I don't know if this is the right place, but I see that your
> SpamAssassin filter gives my domain name a bad reputation. 

No, the past users of the same gTLD have given it a bad reputation. SpamAssassin merely reports that. 

[...]

NOTE: whatever you're using to get a SpamAssassin score is broken. It seems to be showing negative scores for rules that should have positive (spammy) scores and the score values do not match recent versions of the standard ruleset. 

> -0.249	HEADER_FROM_DIFFERENT_DOMAINS	From and EnvelopeFrom 2nd level mail
> domains are different

That's not specific to your domain or TLD, it is a result of the addressing of your email: different domains in the From header and SMTP envelope.

> -0.001	MIME_QP_LONG_LINE	Quoted-printable line longer than 76 chars

That's entirely unrelated to domains, it's a quirk of your email's transport encoding which is formally improper but not *per se* significantly correlated to a message being spam or non-spam. 

> -0.499	FROM_SUSPICIOUS_NTLD	From abused NTLD
> -0.001	FROM_SUSPICIOUS_NTLD_FP	From abused NTLD
> -1.725	PDS_OTHER_BAD_TLD	Untrustworthy TLDs
>  	 	 URI: combien.online (online)

Total score: 2.225 as shown, 2.800 by current release scoring. Most of that is from the last rule, which checks domains found in the body of mail: in theory just from URLs, but that's loosely parsed.

To be deemed "spam" by SpamAssassin using the default configuration, you'd need a score over 5. 

> Do you know how to avoid this by keeping the same domain name so that I
> don't end up spamming my recipients?

Whether you are spamming or not isn't determined by a SA score, it's determined by whether you have the consent of the people you're mailing. We assume that no one filing a bug here is actually spamming unless they say so. :)

Note that the inclusion and scoring of rules in the default ruleset is controlled by a daily automated process that uses submitted corpora of "spam" and "ham" mail 
and their scoring. By design, every message will match some SA rules that have positive (spammy) scores and some that have negative (hammy) scores. If your mail scores below 5 IN TOTAL then SpamAssassin is saying that it is probably not spam. It's not critical to minimize your SA score, it only matters that you don't score too high (i.e. definitely below 5.) Some sites set their thresholds lower, but very rarely lower than 4. 

There is nothing about this that is addressable as a "bug" in SA. The inclusion of the 'online' TLD in the "suspicious" list is grounded in observed empirical fact, and the scoring of the rules using that list is constrained to limit the potential for broad damage (i.e. actually marking legitimate mail as spam.)
Comment 2 multu14200 2022-01-31 15:59:17 UTC
Hello, how can I delete this topic?
Because it contains my email address "sikro94@gmail.com"

Thanks in advance
Comment 3 Benny Pedersen 2022-01-31 17:26:56 UTC
(In reply to sikro94 from comment #2)
> Hello, how can I delete this topic?
> Because it contains my email address "sikro94@gmail.com"
> 
> Thanks in advance

afraid of spam on gmail ?, note the email is not shown to users that is not logged in, so now you added it here to all users not logged in :(

dont do this anymore
Comment 4 multu14200 2022-01-31 17:55:07 UTC
Hey! My email is visible even without being logged in. I just typed it into google and it came up here! :D
Comment 5 Benny Pedersen 2022-01-31 17:57:54 UTC
(In reply to sikro94 from comment #4)
> Hey! My email is visible even without being logged in. I just typed it into
> google and it came up here! :D

your real name is your email that is shown ?

change your realname to a real name, and problem is gone
Comment 6 multu14200 2022-02-13 20:10:47 UTC
Hello! I'm coming back to you because I'd like to erase all traces of this topic. Who should I contact?
Comment 7 Bill Cole 2022-02-13 21:51:14 UTC
(In reply to multu14200 from comment #6)
> Hello! I'm coming back to you because I'd like to erase all traces of this
> topic. Who should I contact?

It is not common to remove bug reports. They are part of the development history of the project. Even when a report is determined to not be a bug, it is useful to retain the record of the interaction to help prevent repeated reports of the same issue. 

As the bottom of all pages here says:

    In case of problems with the functioning of SA Bugzilla, 
    please contact bugzilla-admin@apache.org.

The SA development team does not administer Bugzilla, but our colleagues at ASF who do may be able to remove your email from public display. It also MAY be possible for you to do that yourself by changing your Bugzilla account preferences (e.g. you could change the email address for the account to something meaningless, with a domain ending in .invalid.)
Comment 8 multu14200 2022-02-13 21:54:11 UTC
(In reply to Bill Cole from comment #7)
> (In reply to multu14200 from comment #6)
> > Hello! I'm coming back to you because I'd like to erase all traces of this
> > topic. Who should I contact?
> 
> It is not common to remove bug reports. They are part of the development
> history of the project. Even when a report is determined to not be a bug, it
> is useful to retain the record of the interaction to help prevent repeated
> reports of the same issue. 
> 
> As the bottom of all pages here says:
> 
>     In case of problems with the functioning of SA Bugzilla, 
>     please contact bugzilla-admin@apache.org.
> 
> The SA development team does not administer Bugzilla, but our colleagues at
> ASF who do may be able to remove your email from public display. It also MAY
> be possible for you to do that yourself by changing your Bugzilla account
> preferences (e.g. you could change the email address for the account to
> something meaningless, with a domain ending in .invalid.)

I can't edit my messages and someone quoted me and the message also contains my email address.

Can anyone do anything? I have no rights of my own and I just want my contact information removed from this page, I don't ask for more.
Comment 9 Bill Cole 2022-02-14 14:06:55 UTC
(In reply to multu14200 from comment #8)
[...]
> I can't edit my messages and someone quoted me and the message also contains
> my email address.
To be clear: "someone" was you.

> Can anyone do anything? I have no rights of my own and I just want my
> contact information removed from this page, I don't ask for more.
See https://www.apache.org/foundation/public-archives.html

Messages documenting all the activity in this Bugzilla instance is emailed to the dev@spamassassin.apache.org mailing list. The subscribers to that mailing list include multiple public archives that are entirely outside of our control, as well as an unknowable number of private archives. Even if we were to modify the comments in Bugzilla to remove your email address, it would be still be visible and searchable in places we can't touch. 

In short: whatever damage might be done by posting your email address in this *public* system has already been done and is not reversible.
Comment 10 multu14200 2022-02-14 14:26:37 UTC
(In reply to Bill Cole from comment #9)
> (In reply to multu14200 from comment #8)
> [...]
> > I can't edit my messages and someone quoted me and the message also contains
> > my email address.
> To be clear: "someone" was you.
> 
> > Can anyone do anything? I have no rights of my own and I just want my
> > contact information removed from this page, I don't ask for more.
> See https://www.apache.org/foundation/public-archives.html
> 
> Messages documenting all the activity in this Bugzilla instance is emailed
> to the dev@spamassassin.apache.org mailing list. The subscribers to that
> mailing list include multiple public archives that are entirely outside of
> our control, as well as an unknowable number of private archives. Even if we
> were to modify the comments in Bugzilla to remove your email address, it
> would be still be visible and searchable in places we can't touch. 
> 
> In short: whatever damage might be done by posting your email address in
> this *public* system has already been done and is not reversible.

I already know all this, I find this answer impertinent. This page exists and it's the only one that comes up when I type my email on a search engine. I don't care what's going on behind it, I'm only talking about this page.
Comment 11 multu14200 2022-02-14 14:26:58 UTC
open
Comment 12 AXB 2022-02-14 14:33:03 UTC
Nothing to fix.
Comment 13 multu14200 2022-02-14 16:08:42 UTC
(In reply to AXB from comment #12)
> Nothing to fix.

The problem to be fixed is that I wish to see my personal details (email address in this case) disappear from this page. Please do not intervene on this subject unless it is to solve the problem.
Comment 14 AXB 2022-02-14 16:12:47 UTC
this will be addressed when the dev team has spare resources
Comment 15 multu14200 2022-02-14 16:19:31 UTC
(In reply to AXB from comment #14)
> this will be addressed when the dev team has spare resources

OK. In the meantime, I still want this page to be removed or my email address to be removed from this page.
Comment 16 multu14200 2022-02-14 16:19:45 UTC
open
Comment 17 Benny Pedersen 2022-02-14 16:54:08 UTC
this thread is begin to be very funny :=)

gmail.com is freemail, and in same time copyrighted matrial from the owner writhing here, hmm

report spam if its being big problems with disclosure here
Comment 18 multu14200 2022-02-21 23:23:15 UTC
Hey! Still waiting for someone to delete this topic or the posts that contain my email address. :)
Comment 19 multu14200 2022-03-11 16:21:08 UTC
Hello, up!
Comment 20 AXB 2022-03-11 16:42:12 UTC
Not a bug